migrated to Kea on opnsense today

Site Notices

4 Calibers in 1 Rifle | Hydra Weaponry's Survival Package

[ARCHIVED THREAD] - migrated to Kea on opnsense today

Posted: 5/11/2024 9:44:03 AM EDT

has anyone gone this route with the opnsense/ pfsense appliances yet?

didn't need a tool or anything. just copied and pasted my 20+ static devices over to the new page and applied them

rebooted them all then increased lease time to 7k and they all showed up for leases again

Posted: 5/11/2024 10:21:17 AM EDT

[#1]

I haven’t yet.

Did you just do it because ISC is no longer being maintained?

Posted: 5/11/2024 10:45:05 AM EDT

[#2]

i had read that.

and i just felt like trying it... and it works

errors so far i can't get rid of:
DHCP4_CONFIG_SYNTAX_WARNING configuration syntax warning: /usr/local/etc/kea/kea-dhcp4.conf:181.14: Extraneous comma. A piece of configuration may have been omitted.

there are literally no commas anywhere

Posted: 5/11/2024 11:13:08 AM EDT

[#3]

That’s an odd error.

I’ll probably try it at some point but I’m burnt out at the moment on router things after spending 40+ hours migrating to OPNsense from Untangle last month.

Posted: 5/11/2024 11:41:21 AM EDT

[#4]

Wow I can imagine

overall performance seems faster too who knows

Posted: 5/11/2024 12:02:39 PM EDT

[#5]

Trying to get the equivalent on Tunnel VPN working on OPNsense without having a DNS leak took forever.

I’ll have to give Kea a try sometime.

Happily mines virtualized so I’ll just take a snapshot before changing.

I have something like 100 DHCP reservations though so I may write a little app to move them to Kea from ISC rather than move them all manually.

Posted: 5/11/2024 12:12:01 PM EDT

[#6]

Easy

isc put the dns server on the static mapping page under dns. As in edit your static mapping insert one internal dns server

kea under subnet turn off/ uncheck Auto collect option data.. add the dns server in addition to the default gateway listed

im not leaking

Posted: 5/11/2024 12:20:42 PM EDT

[#7]

I’m doing policy based routing with WireGuard using Proton VPN for specific devices and wanted the DNS traffic to go over the VPN.

Have you checked with https://dnsleaktest.com?

Posted: 5/11/2024 3:00:39 PM EDT

[#8]

Yep

it has worked flawlessly for years following that method as it applies the dns server and only that dns server to the host

Posted: 5/11/2024 4:28:18 PM EDT

[#9]

So do you have all DNS go out over the VPN or just the DNS for the hosts using the VPN?

Posted: 5/11/2024 4:41:07 PM EDT

[#10]

Most devices go out over the wan. Unbound is setup with dns over tls

selected devices go out over policy based routing and those hosts get the static ip from the provider or quad 9 or next dns ip address

[ARCHIVED THREAD] - migrated to Kea on opnsense today

General » Urban Commandos

Win a FREE Membership!

Sign up for the ARFCOM weekly newsletter and be entered to win a free ARFCOM membership. One new winner* is announced every week!

You will receive an email every Friday morning featuring the latest chatter from the hottest topics, breaking news surrounding legislation, as well as exclusive deals only available to ARFCOM email subscribers.

Warning

Confirm Action

About AR15.COM

Stay Connected

Newsletter

Contact Us