Messages

You've gotten farther than I have, in three years with OPNsense I've attempted this several times and never made it even as far as you have.  I use Ubiquity gear, so very similar to the Omada kit.  If you figure this out please post up.  I'd love to move my Chromecasts etc off my LAN.

Not an option to just create a "media" vlan? Add all your tablets/phone's/receivers to this network. Maybe you have to create some "normal" firewall rules to allow to access some lan services.

I have to add that rebooting the router immediately fixes the problem

Maybe first start with restarting only the dhcp service (dhcpd) on the "lobby".
Also, did you verify the logging? (https://192.168.1.1/ui/diagnostics/log/core/dhcpd)

If you do a basic install it will show the WAN *AND* LAN IP.
I see no WAN IP in your picture. Did you connect it to your ISP?

That said, even without internet you should be able to access the routers GUI. But i miss the LAN interface in the picture. Did you manually changed stuff?

Also my main goal is to install AP on 192.168.1.2 and install camera on its wifi with ip (192.168.3.x) to keep it off internet and organized. Can you guide me how can I define the route to camera?

Is your AP and Network Switch VLAN aware?

thanks for updating/feedback. However it does not make sense to me.

What do yo mean with "won't work if it powers on ahead of the router"? What is "ahead"? You mean the order of turning the devices on? This should not matter. If so, my main culprit would be the switch. If possible compare with another switch.

yup, should work. Difficult to help with less information. This is a normal non-vlan switch? You use DHCP? If you followed the next-next-install it should work out of the box.

Those aliexpress Qotom boxes are also popular. Check also servethehome on youtube.

you can use the regex to inspect the url.

Are you sure, if the connection is HTTPS you would only see the domain. Or are i mistaken?

I now see "custom script" is not a default option. So you are "hacking" the system. This will possible break with a opnsense update. It is an appliance.

well, read up on that will ya
"hacking"..was that the scariest word you could come up with?

Do you want people to actually try to help you or do you want to make snarky remarks....I spend my free time to give pointers. Maybe it is incorrect. Figure it out yourself if you know it all.

you can deploy PiHole (google it) to control the DNS and use the same method that you browsers app "youtube channel blocking" works and add it to the pihole so that no one from your network would get it.

Please explain. All youtube adds are on the same domain. So it is all-or-nothing. Only client interception seems to work (at that point you can actually intercept the traffic because Https).

I now see "custom script" is not a default option. So you are "hacking" the system. This will possible break with a opnsense update. It is an appliance.

good question. The other field really look "crontab-like" so if the crontab listing is correct it should be another issue.

start with "*/5" (every 5 minutes) instead of "5" (5 past every whole hour)

It is your DNSBL probably. Beware: if your client is doing a dns lookup *BEFORE* you disable the DSNBL your client will cache the 0.0.0.0 IP.

How do you know they are hitting the old address? Can you create a guide how to reproduce? (needed for a bug ticket also).