Good day!
Am finally taking the plunge to move across from the YouFibre route to OPNsense. I have added a 4x2.5Gbe NIC to my Proxmox server and passed one of the ports through. That has been setup as the WAN interface with the following configuration (screenshot).
I then disabled the existing upstream gateway as I have OPNsense using the YouFibre router to get out too the internet. I checked the live view of the firewall and can see ingress traffic on the WAN interface, to my public IP, so OPNsense must have received it from DHCP.
The problem I am facing is from a local machine via has OPNsense as it's default gateway I cannot reach the internet. I have added a WAN rule to allow all localnet traffic out (it's showing as disabled as rolled back the configuration so I can type up this post :))
What am I missing please?
Quote from: V3G4NC4MP3R on Today at 03:12:11 PMThe problem I am facing is from a local machine via has OPNsense as it's default gateway I cannot reach the internet.
What am I missing please?
I am guessing the Default Gateway needs to be changed from the old NAT behind NAT setup to the new WAN DHCP setup ?!
What is your current WAN IP Address ?
(As in : I hope it's not some 10.x.x.x address for example because the ISP's network thinks it's a new device that needs to be activated or perhaps you are in the wrong VLAN because it's a network shared by multiple ISPs !! )
QuoteI have added a WAN rule to allow all localnet traffic out (it's showing as disabled as rolled back the configuration so I can type up this post :))
I am pretty sure there is no need to add any WAN Rules in a default OPNsense setup : All you need is a correctly working NAT for IPv4 and the two default 'Allow Any to Any' Firewall Rules for both IPv4 and IPv6 and
that's it! ;)
Thanks for replying. I should have made clear that I have a public static IP as part of my service.
Quote from: V3G4NC4MP3R on Today at 03:41:36 PMThanks for replying. I should have made clear that I have a public static IP as part of my service.
Then you need to Manually tell OPNsense that because the Automatic Gateway stuff won't work !!
You can find the explanation @ https://docs.opnsense.org/ ;)
(I don't use the setting so I can't remember anymore what you need to do exactly... sorry!)
Thank you @nero355 - managed to get it working - now need to switch it back so don't upset the wife while I sort out the rules 🤭 Have a wonderful weekend 🤞