Quantcast
Viewing all articles
Browse latest Browse all 20028

Somehow blanked part of config

I have slightly cleaned this up, and redacted -- but can pull other things up if needed:

 

redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--float"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping 10"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping-restart 20"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--ping-timer-rem"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--persist-tun"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--persist-key"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--user nobody"
redacted@ubnt# set interfaces openvpn vtun0 openvpn-option "--group nogroup"
redacted@ubnt# set interfaces openvpn vtun0 local-address 10.101.0.1 subnet-mask 255.255.255.252
redacted@ubnt# set interfaces openvpn vtun0 local-port 1194
redacted@ubnt# set interfaces openvpn vtun0 remote-port 1194
redacted@ubnt# set interfaces openvpn vtun0 mode site-to-site 
redacted@ubnt# show interfaces openvpn vtun0 
+local-address 10.101.0.1 {
+    subnet-mask 255.255.255.252
+}
+local-port 1194
+mode site-to-site
+openvpn-option --float
+openvpn-option "--ping 10"
+openvpn-option "--ping-restart 20"
+openvpn-option --ping-timer-rem
+openvpn-option --persist-tun
+openvpn-option --persist-key
+openvpn-option "--user nobody"
+openvpn-option "--group nogroup"
+remote-port 1194
redacted@ubnt# set interfaces openvpn vtun0 remote-host redacted.example.com

redacted@ubnt# set interfaces openvpn vtun0 shared-secret-key-file /config/auth/secret

redacted@ubnt# set firewall name WAN_Local rule 10 action accept
redacted@ubnt# set firewall name WAN_Local rule 10 destination port 1194
redacted@ubnt# set firewall name WAN_Local rule 10 protocol udp     
redacted@ubnt# commit-confirm
commit-confirm will automatically reboot in 10 minutes unless confirmed
Proceed? [confirm][y]
[ interfaces openvpn vtun0 ]
OpenVPN configuration error: Must specify "remote-address".

Commit failed

redacted@ubnt# show interfaces openvpn vtun0
[ snip -- but everything looked okay here ]
redacted@ubnt# set interfaces openvpn vtun0 remote-address 10.101.0.2
redacted@ubnt# commit-confirm 
Another confirm is pending
^C
redacted@ubnt# confirm 
redacted@ubnt# commit-confirm 
No configuration changes to commit
redacted@ubnt# show interfaces openvpn vtun0
Configuration under specified path is empty
# I somehow didn't notice this. Oops.
# And I thought somehow just these got removed
redacted@ubnt# set firewall name WAN_Local rule 10 action accept
redacted@ubnt# set firewall name WAN_Local rule 10 destination port 1194
redacted@ubnt# set firewall name WAN_Local rule 10 protocol udp

# Not sure why I did this here
redacted@ubnt# save

# And here's where I completely ruined my day
redacted@ubnt# commit

 

Investigating the messed up config.boot shows that the entire "interfaces" subtree got deleted, as well as "vpn" ( which I didn't specifically touch ), and a whole bunch of things under "system"  ( all users besides redacted -- and the following subtrees name-server, ntp, offload, and syslog ) -- A few random settings got turned on as well, such as "older-ciphers enable" inside gui.

 

I can readct the "good" config file I had archived, as well as the bad config file if needed.

 

 

I am thinking somehow my Ctrl-C of commit-confirm may have caused this issue -- but probably requires some tight timing.

 

I have not been able to reproduce this on a spare ERL in a lab environment -- my attempts involve doing my interface openvpn changes, as well as the Ctrl-C of commit-confirm, but I am either wrong on my diagnostics or not hitting the proper timing window.

 

Thank you.


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>