OPNsense Forum
English Forums => Hardware and Performance => Topic started by: routernewb on February 05, 2024, 04:20:44 am
-
I'm new to this whole making a Mini PC secure router/firewall - from a D-link router that hasn't had a firmware update in years..
I found online to buy a Mini PC for the endeavour that's from a major brand, and only a few years back so it still receives support and aforementioned firmware updates
So i decided to go with an Intel Nuc 12 (NUC12WSHi5)
I was just wondering while i wait to receive it (and didn't realize it's a thing i should check):
1 - Can opnsense be used on an Intel Nuc 12?
2 - And more importantly does anyone know if that mini PC has Wifi capabilities and/or opnsense can setup wifi on it?, i need to know before attempting to use it just in case it's not possible since family in the rest of the house relies on wifi connection, and i'd then need to revert back if not and sort something else out
-
NUC is very likely to be fine but the WiFi is doubtful. Can the D-link operate in AP mode?
-
The D-link might be supported under OpenWRT or DD-WRT, otherwise look at OpenWRT TOH and get a WiFi6 router in your geographical area that is well supported and use it as AP behind OPNsense.
Also, the NUC is a fine machine, but way overkill for a FW...
-
Damn, is there a reason why Nuc 12 Wifi is no good for OPNsense? It's overkill as a firewall but its Wifi sucks or is otherwise not compatible? Sigh
(I also went with that mini PC as it was one of the only ones i found that was from a major/trusted brand, made in the last couple of years and so still receiving support/firmware. That was the main thing i was worried about, i could've maybe found one for just a couple hundred cheaper but not far off/fitting that criteria here in Australia, in the bigger scheme of things.)
I was just looking up the openWRT firewall alternative briefly and it's apparently a much more basic, and linux based firewall And apparently OPNsense has "significantly more options and functionality" over it? All i knew previously was PFsense then OPNsense alternative as the makers of PFsense were/are doing some dodgy things and people are switching over. I only mainly saw those two in feedback online for "most secure router" etc. I also am using and only familiar with windows (10 currently) on main PC (if that actually matters.)
I kinda wish i'd found this place and/or thought to ask these things before i bought the Nuc 12 lol.
P.S i'm also not looking to use the Nuc into the D-Link, but as a repalcement (unless you guys only mentioned that for it to work with Wifi alternative specifically). I was going to have the access points connected to a switch, connected to the Mini PC firewall, connected straight into NBN/ISP - unless i shouldn't do that.
Edit: As i've not actually received the Nuc 12 yet, maybe i should send it back when i do/get a refund and get something more compatible? If so any suggestions on one of the major brands in the last 5 years or so, still receiving support/firmware, with Wifi supported by OPNsense? Guess i need a new plan one way or the other.
-
WiFi will be excellent anywhere else. On FreeBSD however it has been lagging for a while due to poor vendor support. You could potentially make use of it by installing proxmox on theh NUC and having it as a virtualization machine running OPNsense in one VM and doing Wi-Fi in another running OpenWRT, but it may be more than you bargained for and in terms of doing it properly and with dedicated antennas - a Protectli vault may be more suited again...
-
That does sound a little too rich for my blood
And i just looked up Protectli Vaults and apparently a prerequisite is the Wifi Kit, then there was a disclaimer on the WiFi kit page saying "Note that the BSD driver for this card only works in B/G mode, so support for wireless N in BSD based systems (including pfSense® CE and OPNsense) may be limited"
Maybe i just stick with and accept my unsecure and outdated D-Link lol
Apparently something figured out a long time ago on the most basic of systems like a random ISP all-in-one router, is so technical and variable for the latest and greatest hardware and software alike
Feels like it's gone from operating a car to operating a commercial airplane, and while the tech is much greater and deeper, i wonder just how much that improves the actual WiFi capability and/or security because of it.
EDIT: Seems like a Firewalla Gold might be something more my speed. I saw someone say the difference between that and say OPN/PFsense is "splitting the difference between being highly configurable for a techie and being user friendly for a non-techie" and while i'm familiar with a PC i'm deifinitely not a techie haha. Maybe i just dived in a little too deeply.
-
I haven't noticed that Firewalla Gold supports WiFi so I am not sure how that would improve the situation other than being pretty easy to use but verbose in operation, like a needy TikToker constantly telling you how good it is.
I gather you do not need much in the way of ethernet ports. The NUC may be overkill technically but it also gives you options as described by newsense. There is no obligation to tackle any now. A bit of future-proofing is nice. Using the NUC with Opnsense feeding the D-link as an AP should work well.
For ease of use you might also consider IPFire, more limited and with a smaller support base than Opnsense but costs nothing, unlike Firewalla.
My ultimate choice was Opnsense.
-
Wait a sec. Let's break it down a bit. You need a firewall/router and Wifi, right?
If the NUC has an Intel or AMD 64bit CPU, it is compatible with OPNSense.
For WiFI: You could try to make it an all-in-one, consumer-style router by making the wifi card, or additional wifi adapter (internal) provide the wifi. Here is where it gets complicated. It is possible by a) having a compatible card b) a suitable slot in the NUC c) suitable freebsd drivers. A tricky combination.
Instead, you could:
- See there is a post somewhere here to add one of the wrt or similar as a virtual machine hosted inside OPN.
OR (and better)
- Use the NUC for OPN as you intended, and put the other router , the D-link , in AP mode, Plug it into a switch and you have your goal.
-
Ah you guys were talking about using the D-Link just as/for Wifi
Apologies for the misunderstanding
Yeah apparently Firewalla isn't much better requiring installation, setup and general use on phone and a few other bits and pieces to even get it going
I'll take a look at using D-Link for WiFi in AP mode and sticking with Nuc 12 OPNsense then if possible
Otherwise thanks for feedback (and repeated solution that i first failed to grasp haha)
-
I was just looking up the openWRT firewall alternative
I didn't say alternative, just as a main OS for the of the shelf WiFi router that is supported in OpenWRT -- check the TOH for a WiFi6 router available in your region.
For the FW HW you can't go wrong with a Protectli FW4C or Deciso DEC 750, and lastly there's AliExpress...
Both the FW and WiFI AP can be considered long time investments, in the 7-10 year range.
Something to consider when doing the $_math_$
-
Note that the NUC only has one physical network interface. You will either need to trunk LAN and WAN as VLAN's from a managed switch, or give up the M.2 E-key slot for a second ethernet like this one: https://www.ebay.co.uk/itm/175456776149