Messages

I got it to work as I intended.

Gateway priority was the same for the WAN address and the 0.2 gateway so that was causing my issues with the other services failing.  Then the static route worked correctly

Add an Alias for the 6.0/24 and then do a LAN pass rule.

Thanks

Jerry

The 192.168.6.0 network is routed, no NAT involved.

After I added the route, I lost RDP and SMTP mail services on the router and disabling the 192.168.0.2 gateway did not help I had to revert back to the old firewall.  My testing & switch over will have to be after hours now due the problems.

Jerry

Ok, here is a quick diagram of the network.

The local lan is 192.168.0.0/24 not 3.0 as posted earlier.

This setup worked with a untangle (arsta) firewall previously.

Trying to route or forward traffic on my local lan 192.168.3.0/24 to 192.168.6.0/24

192.168.6.0/24 is a remote isolated private network that is handled by a Mikrotik router with a local address of 192.168.0.2

I establish a gateway with the 0.2 on opnsense

I have a separate LAN for WiFi so private networks are blocked between the networks.

When I attempt to allow he 6.0 network, I get invalid messages.

Thanks

Jerry

First tests, updates found nothing to update as it was done prior.

Firefox and Edge both did not show the ZA tab

I then removed both ZA packages, and then the Dark theme.

Rebooted, re-installed the ZA packages and then the tab showed up!

Same for both boxes.

I did not go beyond looking at the setup, as I need some sleep tonight!

Thanks

Tried to install Zenarmor on 2 different machines tonight..

Looks like both packages install correctly, however the zenarmor tab does not show up in the menu..

Any ideas?

Thanks

Jerry

Evaluating OPNsense for replacing a untangle firewall

Has anyone done this before?

In simple terms the setup will be

WAN 1  Comcast business Cable Static IP  WAN 2 T-Mobile business gateway with Static IP

LAN 1 192.168.x.x  with IP phones and a FreePBX appliance server, SIP trunking from ClearlyIP.

End goal is a firewall that will use Comcast 100% of the time until failure, then switch to T-Mobile until restored for a period of time

Currently the untangle box is running with just the Comcast gateway enabled, When T-Mobile gateway is enabled I lose voice traffic due to dynamic routes do not properly handle the 2 gateways.

Comcast alone works, T-Mobile works alone so can OPNsense properly handle the routes when they change?

PBX can stay down for a few minutes during the switchover times, but must come back with correct routing for port 5060 traffic.

Thanks

Jerry