Print Page - Setting up home router for ISP with VLAN tagging (and PPPoE, and DoT DNS)

Title: Setting up home router for ISP with VLAN tagging (and PPPoE, and DoT DNS)
Post by: thereaper on March 21, 2020, 08:11:08 AM

Step by step configuring WAN with Vlan via OPNsense GUI
----------------------------------------------------------------

Assumptions:
Default install of OPNsense, Wizard was not run
Your WAN physical interface = re0
Your ISP Vlan Tag = 2

1. Interfaces – Other Types – VLAN = [ Iface: re0, Tag: 2, PCP: 0 ]. Create new interface re0_vlan2
2. Interfaces – Point-to-Point – Devices = [ Interface: pppoe0, Iface(s): re0_vlan2 ]. Create new interface pppoe0

Fill in ISP login/password here.

3. Interfaces – Assignments – WAN = pppoe0
4. Interfaces – WAN – IPv4 Configuration Type = PPPoE
5. Checks:
- in Interfaces – WAN, that login/password been populated from pppoe0.
- Lobby - Dashboard - Interfaces - WAN has IP address (public IP).
- Lobby - Dashboard - Gateways - WAN_PPPOE has IP address (10.x).
- Interfaces – Point-to-Point – Log file

DoT DNS using Unbound (exists in default install)
-------------------------------------------------------

6. in Services - Unbound - General - Custom Options, paste:
server:
tls-cert-bundle: /etc/ssl/cert.pem
forward-zone:
name: "."
forward-tls-upstream: yes
# Quad9
forward-addr: 9.9.9.9@853#dns.quad9.net
forward-addr: 149.112.112.112@853#dns.quad9.net
7. in System - Settings - General - DNS servers:
- enter as first entry: 127.0.0.0, None
8. System - Settings - General - DNS server options - Allow DNS server list to be overridden by DHCP = uncheck

Enjoy :)

TPG specific notes:
login/password were different from my previous ADSL account: <oldlogin>@tpg.com.au / NoPassword (yes, 'NoPassword').

Title: Re: Setting up home router for ISP with VLAN tagging (and PPPoE, and DoT DNS)
Post by: Trigun on April 18, 2020, 09:02:06 PM

Hi,

hopefully you are able to help me out here.

I also have a PPPOE connection with vlan tag.
I've followed your tutorial several times now but I can't seem to get it to work.

can you tell me how you have set up the gateway as my gateway stays empty.
also I have a fixed ip from my ISP now sure how to set this up.

hope you can help me out here.

Thnx in advance!

Title: Re: Setting up home router for ISP with VLAN tagging (and PPPoE, and DoT DNS)
Post by: Trigun on April 19, 2020, 09:13:23 AM

Ok, I got it! Apperantly opnsense makes an assumption which NIC is being used.
After switching cables everything works accordingly.

Thank you for your solution provided

Sent from my iPhone using Tapatalk

OPNsense Forum

English Forums => Tutorials and FAQs => Topic started by: thereaper on March 21, 2020, 08:11:08 AM