"
Hi!
Your situation is really tricky, especially if you are just starting out with OPNsense and already have such a complex setup with VLANs, bridges and 10G. Kudos for the setup - it looks pretty advanced.
Basically, your issue is most likely related to how bridging works in OPNsense. When you enable an interface with DHCP from your ISP (for example for VoIP or IPTV), OPNsense might start treating that interface as a default route, especially if it gets an IP address in the RFC1918 range. This can confuse your LAN.
Here are a few things you can try:
Don't assign an IP address to the bridge. Just create a bridge between the interfaces you want and don't enable DHCP or static on it, especially if you are not sure how OPNsense will route it.
Check the route table to make sure that after enabling the VoIP interface, the default route is not going through it. You can check this in System > Routes > Status.
Firewall rules: make sure that all the interfaces involved have rules allowing the traffic you want (especially "allow all" for the duration of the test).
Don't enable "This interface does not require a gateway" unless you are sure. It can help, but it can also break routes if not applied correctly.
Check "System > Settings > General" to see what the default gateway is and if it is not switched when VoIP is enabled.
You can also use Packet Capture on the interfaces you want to check to see what happens to the traffic when the network "goes down".
If you have screenshots, I'd be happy to see them. Good luck with the setup!
Your situation is really tricky, especially if you are just starting out with OPNsense and already have such a complex setup with VLANs, bridges and 10G. Kudos for the setup - it looks pretty advanced.
Basically, your issue is most likely related to how bridging works in OPNsense. When you enable an interface with DHCP from your ISP (for example for VoIP or IPTV), OPNsense might start treating that interface as a default route, especially if it gets an IP address in the RFC1918 range. This can confuse your LAN.
Here are a few things you can try:
Don't assign an IP address to the bridge. Just create a bridge between the interfaces you want and don't enable DHCP or static on it, especially if you are not sure how OPNsense will route it.
Check the route table to make sure that after enabling the VoIP interface, the default route is not going through it. You can check this in System > Routes > Status.
Firewall rules: make sure that all the interfaces involved have rules allowing the traffic you want (especially "allow all" for the duration of the test).
Don't enable "This interface does not require a gateway" unless you are sure. It can help, but it can also break routes if not applied correctly.
Check "System > Settings > General" to see what the default gateway is and if it is not switched when VoIP is enabled.
You can also use Packet Capture on the interfaces you want to check to see what happens to the traffic when the network "goes down".
If you have screenshots, I'd be happy to see them. Good luck with the setup!
