Messages

You don't. OPNsense will use one of the IP addresses and be the default gateway in that particular network, 5 more are usable for devices. The lowest (lowest 3 bits 000) and the highest (111) address are not usable at all. That's how IP works.

This is not the case for a routed /29 in a link/transport net, the entire /29 is useable for devices.

I have a similar setup on another location, where I currently use 7 IPs.

I think OPNsense calls this a far gateway, when your gateway resides in another net.

A transfer net is the setup, yes, a /30 with the /29 routed "inside".

I've setup the /30 on the WAN interface, but how do I set up the full /29 on an interface, without OPNsense using one of the IPs?

In your example, 192.168.0.1 would be "used" on the OPNsense interface, and not useable on a device, correct?

I am new OPNsense user and i'm still not entirely sure i've wrapped my head around how opnsense does "routing". (I am currently using an EdgeRouter)

I have a /29, lets use 192.168.0.1/29, fully routed.

If I assign 192.168.0.7/29 to an interface, can I still use that IP "behind" the interface, or do I need to do some form of NAT, possibly 1:1, to access the equipment on that port?

Also, if I have multiple interfaces and I need to break up the net and "route" some of the IPs to one, some to another, how is this possible? (I think that this is maybe where virtual IPs should be used)


Thanks in advance for any help

Let me preface, I am by no means a networking or firewall expert, but I am currently building a small Proxmox server that will be running a mix of VMs and containers, and I am planning on putting an OPNSense in front of it all.

I have a routed /29, in a linknet, but I am wondering on how to best separate the individual servers in a virtual environment.

Should I create a proxmox bridge for each, and end up with an OPN with 10+ virtual NICs, or would it be better to use VLAN devices and a single bridge proxmox VLAN aware bridge, with all servers connected?

Or is there possible a better suited solution for a setup like this?