I've move this one to OPNsense Forum »English Forums »24.1 Production Series »
https://docs.opnsense.org/manual/settingsmenu.html#listen-interfaces
QuoteBoth the WebUI and the Secure Shell server support the option to only listen on specific interfaces, the use of this option however comes with clear warnings which you do need to be aware of before deciding to use this option.
By default (our recommended settings), these services listen on all addresses (interfaces).
If for whatever reason, you do need to listen only on specific interfaces, the following rules apply:
The interface must always be available, so do not try to bind to vpn instances of any kind (OpenVPN, Wireguard, ...)
The addressing must be fully static, so no IPv6 tracking configured for example
As the webgui is not able to predict with 100% certainty that these rules do apply, it is possible to select interfaces that don't support binding for these services.
Regards,
S.