Messages

Hi all,

We have DEC3860 that is running smoothly. However, I"m running into a few issues.

We have three internet lines: One 100 mb/s one 200 mb/s and one 1gb/s. For some networks I have enabled the gigabit network under Firewall -> Rules -> Network -> Gateway -> Gigabit one.

The speeds are good over wifi but when connected I cannot access the web interface even though I'm on the same network that works with the default gateway. I have attached a few screenshots of the firewall rules on the vlan.

The diagram now is

DEC3860 -> Switch Pro 24 -> USW Pro Max 24 and US-8-150W for the switches through the building. This goes to 40 ap's also from unifi with flex mini's in between with all vlans configured already.

LAN Network: 10.9.24.x
LAN Network using sfp: 10.8.24.x

All other networks can only access the dns server and the internet. Our personal network can access everything. 

So the few remaining questions are this:

1: How do I access the web ui using my allow all network using the gigabit wan.

2: Is is possible to quickly change all the vlans from the LAN interface to the SFPLAN? That is because it's 10GB connection to the switches and we can upgrade to 4Gb/s connection later this year. All the unfi stuff needs to be stay online ofcourse.

Can you ping the gateway .229 from your OPNsense? If not you need to contact your ISP about the correct configuration.

HTH,
Patrick

No, I cannot ping the .229 gateway

Just to point out.... When you mask the first 2 octets in one post, then mask the last 2 octets in another, it's pretty easy to put them together.  ;)

Yep, just realized that. Oh well.

I'm not sure what I am doing wrong but i'm still getting no internet from the static wan side.

Create a gateway with that IP address. Create default route to that gateway. It's just one more layer of abstraction enabling to give the gateway IP addresses meaningful names.

What should I enter at the network address? I've tried various variations of  0.0.0.0 0.0.0.0 but it won't let me save it. Always get a 'Specify a valid network matching the gateways ip protocol.' error.

Hi all,

For my isp here in the netherlands I need to make a route to ip route to ip route 0.0.0.0 0.0.0.0 145.54.xx.xx with a static ip on the wan side.

However, when I add a static route, it only allows me to send it via a gateway. and not send all traffic to that ip. I'm still abit new to opnsense. Here is the cisco config they provided.

---------------------------------------------------------
Dit is een voorbeeldconfig voor Cisco routers met IOS 12.x. en hoger waarbij GigabitEthernet1/0 is gekoppeld aan het interne netwerk en GigabitEthernet0/0 aan poort van de EVPN node van KPN. Aan deze config kunnen geen rechten worden ontleend.
---------------------------------------------------------

!
Interface GigabitEthernet1/0
description connection to internal network
ip address 31.149.xx.xx 255.255.255.248
no cdp enable
ip verify unicast reverse-path
no ip redirects
speed 1000
full-duplex
no shutdown
!
Interface GigabitEthernet0/0
description connection to KPN / CapID : CIN71206
ip address 145.54.xx.xx 255.255.255.252
no cdp enable
no ip directed-broadcast
speed 1000
full-duplex
no shutdown
!
no service finger
no service udp-small-servers
no service tcp-small-servers
no ip source-route
ip subnet-zero
ip classless
ip cef
ip name-server 194.151.228.18
ip name-server 194.151.228.34
!
ip route 0.0.0.0 0.0.0.0 145.54.xx.xx
!