Messages

Zeig doch mal den Logeintrag für den Client der erfolgreich eine IPv4 bekommt im gleichen VLAN, scheint für mich grad unwahrscheinlich.

Welche OPNsense Version setzt Du ein? Welchen DHCP Server setzt Du ein, DNSmasq oder KEA DHCP? Und ist bei dem DHCP Server 'Firewall rules' (KEA) oder 'DHCP register firewall rules' (DNSmasq) gesetzt?

Would please provide more information? Where on the Fritzbox do you connect the OPNsense box, LAN or DMZ? Is OPNsense WAN usually getting a Fritzbox LAN address (192.168.178.xx ?). Do you set a static WAN to get it working? Have you changed anything on the Fritzbox? What OPNsense version are you using? OPNsense as a VM or a physical device?

Does a client connected to Lan2 get an IP? Can you post screenshots of interface, dhcp and firewall rules?

Is the ASUS AP is in AP mode, not router mode I assume? And do you restart the AP if you switch between LAN and lan2?

You will of course need a firewall rule on lan2, similar to the main LAN. Per default all traffic is blocked.

I usually clone the main LAN rule, edit the clone and change the interface to the new network (lan2 in your case).

I added 77.**.**.49 as a Gatewa

You set that gateway in the WAN interface settings, in the field "IPv4 gateway rules"? If yes, then I don't know, works for me.

ran the setup wizard and set the WAN address to IPv4 static 77.**.**.55/28

If you set the WAN as static you have to manually set/choose the gateway in the interface settings. Setting a gateway makes it a WAN connection (for the system) and then the NAT rules are created automagically.

Zenarmor is not yet ready for 26.7, read official statement here https://forum.opnsense.org/index.php?topic=52376.0, and more about in the Zenarmor category.

Are you sure the OPNsense forum is the ideal place to ask that question? I for one have never setup Wireguard using NetworkManager, only using wg-quick.

Best to ask in either the forum of the Linux distribution you are using or NetworkManager forum.

Now I have to find why my Asus router dont get enternet from port 3, whereas PC getting enternet thru port 2.

Is the Asus AP on port 3 on it's own network or on the same LAN the PC? If on the same LAN as the PC, did you createa bridge in OPNsense?

Protocol tcp
Port range : 80 to 443

You set that for the destination port range, not the source. But as @viragomann writes, better to create an alias and use that. Or allow all access to destination 'This Firewall', not sure you want to be restricted in an case of emergency.

Did any interfaces change between the backup and when you restored it? Did you reboot after the restore?

Thanks for trying to help, seriously!
But in this case, I fear it's pointless.

Ok, noted :)

can you give me the exact link to the fetch -o .... for the 25.7.....

To get the fingerprint, does the Github link he posted not help you? There yout get the exact URL to the file. Or the help text on https://opnsense-update.walker.earth and adapt it for 25.7 with the file name visible in the GH link? Like this:

# fetch -o /usr/local/etc/pkg/fingerprints/OPNsense/trusted https://github.com/maurice-w/opnsense-core/blob/stable/25.7/src/etc/pkg/fingerprints/OPNsense/trusted/opnsense-update.walker.earth.20250717

The rest is simply using vi. For example pressing "i" for "insert" mode and making my changes.

Oh, I see, I misunderstood. I thought you are talking about vi mode of the shell, like with bash you can set vi mode and that let you work with the command line and history with vi keys.

Not sure about Ctrl^A, you press them all together? What is it supposed to do; in control mode jump to the beginning of the line (to the left) and change to insert mode?

How are you getting a vi mode? The shell used on OPNsense is not bash or ksh or sh, at least it doesn't understand 'set -o vi'.