2
0
mirror of https://github.com/opnsense/docs synced 2024-11-10 19:10:55 +00:00
Commit Graph

600 Commits

Author SHA1 Message Date
Ad Schellevis
0c57a39f65 System: Gateways: Group - add a note in the example about the "gateway" selection. closes https://github.com/opnsense/docs/pull/518 2023-11-15 17:48:11 +01:00
Ad Schellevis
60825064db stylefix 2023-11-09 15:54:54 +01:00
satrapes
07b8c50c59
Update terminology on Wireguard how-to pages (#517) 2023-11-09 14:55:40 +01:00
Ad Schellevis
eb0fdefcf9 ETPro-telemetry - add product information links 2023-11-09 09:56:33 +01:00
Ad Schellevis
7b27b51f1d VPN: IPsec - add DPD so we have aplace holder to mention the "enable" flag 2023-11-08 15:55:58 +01:00
Ad Schellevis
8a48dce6da System/Access/Servers - add compliance option and some cleanups. closes https://github.com/opnsense/docs/issues/514 2023-11-08 15:12:22 +01:00
Ad Schellevis
467f9585e0 Installation / ESXi - align network driver choice to VMware's compatibility guide. 2023-11-06 17:33:54 +01:00
Ad Schellevis
03b004d1b5 System: Gateways: Group - better explain groups and point to the requirement of addresses. closes https://github.com/opnsense/docs/issues/513 2023-11-05 11:43:40 +01:00
Ad Schellevis
bcb0368cc4 VPN / OpenVPN - some typos in sslvpn_instance_s2s.rst 2023-11-04 15:33:05 +01:00
Ad Schellevis
1798c1c868 VPN: WireGuard - add baseline documentation and move examples. closes https://github.com/opnsense/docs/issues/504 2023-10-31 17:33:11 +01:00
Monviech
7bfa32740c
Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst (#510)
Hint that IPv6 transport doesn't work with UDP Encapsulation
2023-10-31 13:27:29 +01:00
Ad Schellevis
dab8d004d9 VPN / IPsec / General context - explain constraints when using both tunnels and connections. closes https://github.com/opnsense/core/issues/6950 2023-10-23 20:02:44 +02:00
Ad Schellevis
1392c4e471 Setup/Updates - add some troubleshooting tips (most common causes for update issues). 2023-10-20 19:49:39 +02:00
Daniel Aleksandersen
2f1b56bc93 mdns-repeater only supports up to 5 interfaces
Upstream documentation:
fbe78e7ffd/mdns-repeater.c (L330)
2023-10-20 09:28:56 +02:00
Maurice Walker
d1043f1da6 DHCPv6: document downstream prefix delegation 2023-10-20 01:15:07 +02:00
Ad Schellevis
8086c52a2d fix minor compile issues 2023-10-16 10:15:21 +02:00
Ad Schellevis
8d8a939f83 System: Configuration: History - update documentation with new MVC implementation, closes https://github.com/opnsense/docs/issues/503 2023-10-16 09:56:08 +02:00
Ad Schellevis
51b9acd79f Interfaces: Neighbors - add initial documentation, closes https://github.com/opnsense/docs/issues/506 2023-10-15 15:29:19 +02:00
Monviech
54eef60c16
Wireguard - Reworked wireguard s2s completely & added MTU + MSS to wireguard client (#498)
* Update wireguard-client.rst - Add MTU and MSS hints

* Update wireguard-s2s.rst - Add MTU and MSS hints

* Update wireguard-s2s.rst - changed mss values

* Update wireguard-s2s.rst - Reworked How-To completely

* Update wireguard-client.rst - adjusted mss value

* Update wireguard-client.rst - Different mss values for IPv4 and IPv6

* Update wireguard-s2s.rst - Improved some aspects

* Update wireguard-client.rst - Improved some aspects

Normalization rules should have different MSS values for either IPv4, or IPv4+IPv6.

Changed the protocol back to any, since I'm unsure if selecting TCP only means IPv4 TCP, since there is also only IPv6 selectable.

* Update wireguard-s2s.rst

- Omitted Source Port in Firewall rules
- Added tip and note about dynamic WAN IP

* Update wireguard-s2s.rst - Terminology changes 23.7.6

- Changed Local to Instance
- Changed Endpoint to Peer
- Added information about CARP vhid tracking to mitigate HA problems.
- Added note about Keepalive for NATed sites.
2023-10-15 15:04:43 +02:00
Monviech
d16635ca9a
ipsec-swanctl-rw-ikev2-eap-mschapv2 (#501)
* created ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* Update vpnet.rst

Changed the position of Legacy and New > 23.1
Added how-tos/ipsec-swanctl-rw-ikev2-eap-mschapv2 to doctree in New > 23.1

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

General structure of How-To added

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Populated Prerequisites

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Populated IPsec connection settings for roadwarriors

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Fixed IP address formatting in pools

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* ipsec-swst Version completedanctl-rw-ikev2-eap-mschapv2.rst - Fir

* Update vpnet.rst - Switched Positions for client config

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Version 1.0

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

- Added DNS configuration payload information to pools and clients https://github.com/opnsense/core/pull/6864
- Added hint that ncp client is not affiliated with Deciso B.V.

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Added Routing

hint for Windows RAS Client in Split Tunneling mode.
2023-10-15 15:02:27 +02:00
Monviech
3cc00bfdf5
Update nat_reflection.rst (#507)
* Update nat_reflection.rst

- Fixed typo (asynchronous should be asymmetrical traffic)
- Added note about "reply-to" in specific setups with VPN WAN

* Update nat_reflection.rst

- Fixed VTI NAT description, referenced the tunables to make it work
2023-10-15 14:59:46 +02:00
Stephan
7c208a30b5 unbound: update DNSBL sources list and explain wildcard lists 2023-10-03 09:49:44 +02:00
Ad Schellevis
4a79cb9aed Services: Intrusion Detection - make a note about emulated mode as this is often a more stable solution when there are traffic issues with network cards / drivers. 2023-10-03 09:18:50 +02:00
Ad Schellevis
9f1bee2aa0 VPN: IPsec - add some migration notes when moving from tunnels to connections. 2023-10-02 16:44:26 +02:00
Ad Schellevis
8d030c3596 minor compile issue in https://github.com/opnsense/docs/pull/489 2023-10-02 15:54:27 +02:00
Cedrik Pischem
e86e01f1db
How-To for Reflection and Hairpin NAT added (#489) 2023-10-02 15:37:01 +02:00
Ad Schellevis
f3b42ec79e System: Configuration: Backups - history setting moved as part of https://github.com/opnsense/core/issues/6828 2023-09-27 10:14:04 +02:00
Ad Schellevis
5aa468ceba Authentication - LDAP: add new "constraint groups" property implemented in d971257fd9 2023-09-27 09:08:44 +02:00
Alexander Münch
ded92025fc Fix: Typo in reverse_proxy.rst 2023-09-09 21:13:52 +02:00
xilmen
946e9471e4
Change path for update (#492) 2023-09-04 08:42:45 +02:00
Hiigaraa
c2745b3ddc
Update Orange FTTH guide with additionnal info and troubleshooting section (#475) 2023-09-01 13:21:18 +02:00
Thomas
1eecec559c
manual: how-to for FritzBox IPv6
New HowTo to explain the setup of an OPNsense as IPv6
router / firewall behind an AVM Fritz!Box (common German Router)
2023-08-29 14:06:09 +02:00
Monviech
c0c1bb9e5c
Update carp.rst - fixed Build Warnings and added note (#490) 2023-08-28 09:50:46 +02:00
Ad Schellevis
6f042673be IDPS / User defined rules - glue howto (https://github.com/opnsense/docs/pull/485) into document 2023-08-26 11:18:43 +02:00
Ad Schellevis
25b61f66a4 VPN: OpenVPN - explain interaction with CARP, including the new option introduced in f56c6e2a0b 2023-08-26 11:02:11 +02:00
Monviech
ceed02cc9c
How-To added for suricata bypass feature (#485) 2023-08-26 11:02:01 +02:00
Monviech
cb07e622b6
Update carp.rst - Add IPv6 CARP Section (#488) 2023-08-25 13:18:39 +02:00
Ad Schellevis
c3651bb78f Wazuh agent - point to debug toggle when the logging is too limited to find issues. 2023-08-23 10:06:15 +02:00
Franco Fichtner
b4146d3959 manual: update Dynamic DNS for native backend changes 2023-08-18 09:54:30 +02:00
Ad Schellevis
e3eef04970 add wazuh-agent documentation 2023-08-16 21:15:50 +02:00
Ad Schellevis
62d8fc1915 Community Plugins / HAProxy - ditch outdated documentation without owner. 2023-08-08 14:49:38 +02:00
Failing Root
097db9d6ae
fix typo (#482) 2023-07-29 17:22:29 +02:00
Ad Schellevis
a899fe3000 VPN/IPsec add Miscellaneous section to explain tunables, starting with PMTU/DF bit 2023-07-26 16:00:29 +02:00
Stephan de Wit
f134b6f3bd firewall: diagnostics: states: document the kill-all-states button 2023-07-13 16:51:35 +02:00
Stephan de Wit
d577cf7f7f unbound: small rephrase/addition based on new MVC page 2023-07-13 16:35:24 +02:00
Stephan de Wit
d8f42f0484 gui: rephrase search input and document tokenization of search phrases 2023-07-13 16:34:14 +02:00
Stephan de Wit
97db0d20f8 system: configuration: backups: document console settings and interface mismatches 2023-07-13 14:26:09 +02:00
Stephan de Wit
e4f27e1f37 dhcp: documentation for the MVC leases pages 2023-07-13 13:28:21 +02:00
Matt Jolly
b5401626f2
Fix typo'd port (#481) 2023-07-12 13:25:02 +02:00
Ad Schellevis
470ff9702c OpenVPN - add new Instances module 2023-06-29 19:09:02 +02:00