The reason for the WiFi router before the opnsense box is to have a wired/wireless non-vpn network, then have the opnsense box handle VPN afterwards. I'll try like you said to setup opnsense from the modem then go back from there.
Sent from my SM-N910W8 using Tapatalk
Sent from my SM-N910W8 using Tapatalk