Messages

If I understand it correctly then ETH0 is your WAN. But ETH2 is also a WAN ?. I don't know what "Tmobile home internet" is but from the sound of it, I imagine it an ISP router/modem combo-type thing. If yes, then your are on a multi WAN setup. That's fine but is an important part of the setup.
That out of the way then you could lay another cable from ETH3 but you can also use VLANs on ETH1 as you are thinking. Makes sense.
 

Yes I am on multi-wan. ETH0 is my primary connection (Optimum 1GB fiber) and if that goes down it switches to ETH2 which is a cellular service.

Optimum is giving me a public IP and Tmobile is giving me a private IP

Let me give some more background

The OPNsense system is upstairs and it has 4 Ethernet ports
ETH 0 goes to the ONT
ETH 1 goes to a managed switch
ETH 2 goes to the Tmobile home internet
ETH 3 is unconnected

The managed switch it is plugged into feeds into my basement switch which is also managed.

That switch feeds a few computers and the solar inverter monitor. That switch also branched out to a managed switch in my wife's office and the living room where my AP is located.

There are 4 managed switches in all

Thanks for the help

Good <fill in your time of day here>

I need advice and guidance on how to re-configure my IP address layout without destroying the network and incurring the wrath of my wife.

Currently I am running OPNsense 25.1.9_2-amd64 on physical hardware with two internet connections

Primary is Optimum Fiber [wan] and if it goes down it OPNsense should switch to the T-Mobile internet gateway [opt1]  until Optimum comes back

Optimum is giving me a 173.3.X.X address and T-Mobile is assigning 192.168.12.X so while neither is using CGNAT I think the 192.168 network should not be using for my internal devices

I currently have ISC DHCPv4 setup with a Subnet of 10.1.0.0 and using a mask of 255.255.0.0 and a single pool of 10.1.1.10 to 10.1.1.245

Right now I am mapping each known MAC to a static IP in the following range

10.1.1.10 - 10.1.1.254 assigned to physical network hardware
10.1.2.1  - 10.1.2.254 assigned to wired computers
10.1.3.1  - 10.1.3.254 assigned to wireless interfaces of the same computer example if my Dell Laptop 1 is 10.1.2.5 when connected over ethernet it is 10.1.3.5 when connected to wifi
10.1.4.1 -  10.1.4.254 Printers
10.1.5.1 -  10.1.5.254 My IOT Devices


I know that my range is too messy and too large and I want to pare it back. I have upgraded all my switches to managed ones so I can implement VLANS.

I am going to want to have the following VLANS unless there better ideas. I am going to use letters to identify each VLAN although I know they are assigned by numbers

VLAN A is for my personal computers that I have full management over they can access any of my personal devices including printers and my NAS
VLAN B is for the printers they should only be able to be accessed by the devices on my local network
VLAN C is for my smart devices which should not talk to any of the systems in VLAN A
VLAN D is for identified guests they should only have access to the internet and printing.
VLAN E is for systems connected to my network that I have not identified and assigned to A-D

If more information is needed please ask,

I messed up my Opnsense install and need to re-do it. The problem is the location the system is in does not have a display nearby. I brought up my spare TV and found out that it is broken. 

The system I am using has four Ethernet Ports labeled 0 through 3

Port 0 is going to Internet Connection 1
Port 1 is going to Internet Connection 2
Port 2 is intentionally unused right now
Port 3 is going to my network

I temporarily replaced my Opnsense system wigth an RT-AC68U so I could get the internet back up because my wife needs it to work tomorrow

I'm running on a headless system. While I can move a screen to where it is located, that would be very inconvenient.  My Opnsense system is handling my whole house and if it goes down I will have an unhappy wife.

I made errors with my DHCP configuration and don't know the safest and cleanest way to fix this. What I want is to assign the following ranges of IP's out in preparation  of setting up VLANS
10.1.1.X network for network hardware and servers real and virtiual
10.1.2.X network for  printers and scanners
10.1.3.X for my and my wife's computers
10.1.4.X for cell phones, tablets and E-readers
10.1.5.X for our smart devices
10.1.6.X for guest devices


When I view the logs for Services: ISC DHCPv4: Log File I see messages such as
2024-07-20T18:58:39-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:58:39-04:00   Error   dhcpd   Remove host declaration s_lan_14 or remove 10.1.3.2   
2024-07-20T18:58:39-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.3.2.   
2024-07-20T18:48:11-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:48:11-04:00   Error   dhcpd   Remove host declaration s_lan_20 or remove 10.1.4.3   
2024-07-20T18:48:11-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.4.3.   
2024-07-20T18:45:06-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:45:06-04:00   Error   dhcpd   Remove host declaration s_lan_7 or remove 10.1.1.8   
2024-07-20T18:45:06-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.1.8.   
2024-07-20T18:44:54-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:44:54-04:00   Error   dhcpd   Remove host declaration s_lan_22 or remove 10.1.5.10   
2024-07-20T18:44:54-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.5.10.   
2024-07-20T18:44:23-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:44:23-04:00   Error   dhcpd   Remove host declaration s_lan_10 or remove 10.1.2.1   
2024-07-20T18:44:23-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.2.1.   
2024-07-20T18:36:37-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16   
2024-07-20T18:36:37-04:00   Error   dhcpd   Remove host declaration s_lan_6 or remove 10.1.1.5   
2024-07-20T18:36:37-04:00   Error   dhcpd   Dynamic and static leases present for 10.1.1.5.   
2024-07-20T18:33:13-04:00   Error   dhcpd   from the dynamic address pool for 10.1.0.0/16