Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OPNSense 21.7.8 & 22.1 support & WPA_supplicant configuration file #60

Open
wants to merge 5 commits into
base: supplicant
Choose a base branch
from

Conversation

zombielinux
Copy link

@zombielinux zombielinux commented Nov 11, 2021

Updated code for using a wpa_supplicant configuration file and support for OPNsense 21.7.3.

Notable change is the addition of spoofing the $ONT_IF mac address BEFORE bringing the interface up.

Successful configuration file to be placed in /usr/local/etc/syshook.d/early/99-opnatt. To be used in conjunction with a /conf/pfatt/wpa/wpa_supplicant.conf file.
Added wpa_supplicant configuration file. The bash parsing of the list in the original opnatt.sh was complicated and unnecessary.
@zombielinux zombielinux changed the title Supplicant OPNSense 21.7.3 support & WPA_supplicant configuration file Nov 11, 2021
Removed some additional hardcoded entries.
@Hou-dev
Copy link

Hou-dev commented Feb 5, 2022

Thanks for this. I was thinking of implementing pfatt like this. Will test this later and report on this comment. Much more clearer with separate files for supplicant and bridge methods. Edit: There seems to be some issue with the latest firmware opnsense 22.1 with my intel and broadcom nic. Stuck on wpa authentication. Made sure to check all files and locations and they are correct.
original_a9086da7-f6e2-44af-a781-3837bd64f106_PXL_20220206_084810558

@owenthewizard
Copy link
Contributor

+1 would love to see this merged.

Explicitly load ng_ether module to prevent wpa_supplicant from hanging later in the script.
@MrCaturdayNight
Copy link

This current version worked for me on 21.7.8 as well. Thanks!

Added "-vlanhwtag -vlanhwfilter -vlanhwtso" to line 50 to enable supplicant auth on OPNSense 22.1 per MonkWho#65
@zombielinux zombielinux changed the title OPNSense 21.7.3 support & WPA_supplicant configuration file OPNSense 21.7.8 & 22.1 support & WPA_supplicant configuration file Feb 24, 2022
@johnburbridge
Copy link

johnburbridge commented Mar 29, 2022

@zombielinux confirmed this works on a fresh install of 22.1.2_2. What's interesting is that I did not have to assign ngeth0 to WAN. Its working with the previously assign physical interface (in my case igb0, on an Intel I350-AM4).

Am in the middle of upgrading to 22.1.4 but don't expect any issues.

Thanks so much for this! Would love to buy you a coffee.

UPDATE after upgrading from 22.1.2_2 -> 22.1.4:
The physical IF was still able to acquire its ip address but there was no route out. On a whim, rather than manually assigning the route (which might change without notice) I switched over and assigned WAN to ngeth0 which made things start working again. It's not entirely clear if this was due to the upgrade or something to do with surviving a reboot, but I can confirm everything works after assigning WAN to ngeth0 and it does survive reboots.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants