Messages

You cannot do this in the GUI but you could in the config import folder.

https://docs.opnsense.org/manual/dnsmasq.html#advanced-settings

Thanks a lot :)

Hello,

I'm moving from standalone dnsmasq to opnsense dnsmasq.
In original dnsmasq.conf file I'm setting some tags based on MAC (vendor)

Code Select Expand

dhcp-mac=set:moxa,00:90:E8:*:*:*
dhcp-mac=set:red,64:16:7F:*:*:*    # polycom vvx phones
dhcp-mac=set:esp32,80:f3:da:*:*:*
dhcp-mac=set:esp32,1C:DB:D4:*:*:*

How can I achieve this in opnsense dnsmasq. I can only see option to set tags per individual hosts.

Thanks!

Create a feature request on github.

Dear Patrick,

Thanks for suggestion. I opened the request: https://github.com/opnsense/core/issues/9320

Dear,

Does someone knows how to achieve this in OPNsense 25.7 where "Custom options" has been removed from OpenVPN Instances configuration?
This means Step-1 cannot be done.

As I understood putting things into /var/etc/openvpn will not survive "GUI Save"

Thanks a lot!

@viragomann

I confirm it did the trick.
Thanks!

Dear viragomann,

Thanks a lot. Unfortunately I cannot test it till Monday. I will check it and let you know :)

Dear OPNsense users,

I have a network topology as on attached picture.
You cannot view this attachment.

What I need is to VPN connect to the OPNSense (200.200.10.190) from PC_RW and then be able to access PC_1,2 or 3.
The challenge is the LAN has a gateway 192.168.1.200 which is not the OPNSense (192.168.1.190).
I guess in addition to setting up openvpn instance (I followed OPNSense 24.7 – OpenVPN Remote Access Setup | SSL/TLS + User Authentication) one would need to add some prerouting and forwarding/masquerading - which honestly I have very little experience/knowledge of.

Did any of you made this configuration working in OPNsense (25.1)?

Thanks in advance
(Note: WAN addresses are not my real, only for demonstration)

Dear Madifor

I'm facing same issue (reachability). Can you share the firewall rules? I can reach WAN but whatever I do I cannot get to LAN. I do suspect firewall.

Thanks :)