I have slightly cleaned this up, and redacted -- but can pull other things up if needed:
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--float" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping 10" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping-restart 20" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping-timer-rem" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--persist-tun" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--persist-key" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--user nobody" redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--group nogroup" redacted@ubnt# set interfaces openvpn vtun0 local-address 10.101.0.1 subnet-mask 255.255.255.252 redacted@ubnt# set interfaces openvpn vtun0 local-port 1194 redacted@ubnt# set interfaces openvpn vtun0 remote-port 1194 redacted@ubnt# set interfaces openvpn vtun0 mode site-to-site redacted@ubnt# show interfaces openvpn vtun0 +local-address 10.101.0.1 { + subnet-mask 255.255.255.252 +} +local-port 1194 +mode site-to-site +openvpn-option --float +openvpn-option "--ping 10" +openvpn-option "--ping-restart 20" +openvpn-option --ping-timer-rem +openvpn-option --persist-tun +openvpn-option --persist-key +openvpn-option "--user nobody" +openvpn-option "--group nogroup" +remote-port 1194 redacted@ubnt# set interfaces openvpn vtun0 remote-host redacted.example.com redacted@ubnt# set interfaces openvpn vtun0 shared-secret-key-file /config/auth/secret redacted@ubnt# set firewall name WAN_Local rule 10 action accept redacted@ubnt# set firewall name WAN_Local rule 10 destination port 1194 redacted@ubnt# set firewall name WAN_Local rule 10 protocol udp redacted@ubnt# commit-confirm commit-confirm will automatically reboot in 10 minutes unless confirmed Proceed? [confirm][y] [ interfaces openvpn vtun0 ] OpenVPN configuration error: Must specify "remote-address". Commit failed redacted@ubnt# show interfaces openvpn vtun0 [ snip -- but everything looked okay here ] redacted@ubnt# set interfaces openvpn vtun0 remote-address 10.101.0.2 redacted@ubnt# commit-confirm Another confirm is pending ^C redacted@ubnt# confirm redacted@ubnt# commit-confirm No configuration changes to commit redacted@ubnt# show interfaces openvpn vtun0 Configuration under specified path is empty
# I somehow didn't notice this. Oops.
# And I thought somehow just these got removed
redacted@ubnt# set firewall name WAN_Local rule 10 action accept
redacted@ubnt# set firewall name WAN_Local rule 10 destination port 1194
redacted@ubnt# set firewall name WAN_Local rule 10 protocol udp
# Not sure why I did this here
redacted@ubnt# save
# And here's where I completely ruined my day
redacted@ubnt# commit
Investigating the messed up config.boot shows that the entire "interfaces" subtree got deleted, as well as "vpn" ( which I didn't specifically touch ), and a whole bunch of things under "system" ( all users besides redacted -- and the following subtrees name-server, ntp, offload, and syslog ) -- A few random settings got turned on as well, such as "older-ciphers enable" inside gui.
I can readct the "good" config file I had archived, as well as the bad config file if needed.
I am thinking somehow my Ctrl-C of commit-confirm may have caused this issue -- but probably requires some tight timing.
I have not been able to reproduce this on a spare ERL in a lab environment -- my attempts involve doing my interface openvpn changes, as well as the Ctrl-C of commit-confirm, but I am either wrong on my diagnostics or not hitting the proper timing window.
Thank you.