Messages

Does the client get an IP - WAN is set to DHCP due to ISP

I was referring to the clients in your network, does the client you get an IP when on VLAN 5 - Trusted?

In Dnsmasq the following Vlan Interfaces have been chosen to have DHCP, DMZ, GUESTS, IOT, LACP_To_CISCO, LAN, MGMT_VLAN, SECURITY, STORAGE and TRUSTED. Each of these Interfaces has been assigned a DHCP range which covers any IP address that may also manually be assigned.

The only two Vlan Interfaces that have not been assigned DHCP in Dnsmasq are WAN and MGMT.

While trying to solve my current problems I have been assigning my laptop an IP address within the MGMT_VLAN subnet and moving the cable from port 5 to port 23, which is assigned to the MGMT_VLAN. This is the only way I've been able to use the internet.

When I'm ready to test any changes I've made I change the network adapter in the laptop to obtain an IP address automatically. At present the laptop is reporting that it is unable to contact the DHCP Server and rather than an IP address from the TRUSTED Vlan range being assigned an IP address from the LAN has been assigned.

ISC DHCPv4 Server and Dnsmasq DNS/DHCP are running.

AFAIK you can not run those at the same time ?!

I have now removed ISC DHCPv4 & v6 from the system. I am using Outbound DNS with Dnsmasq DNS/DHCP.
Thanks for the advice.

Can you provide more information in what does not work? How is OPNsense connected to the internet? Can you access the internet from OPNsense itself? Where do you connect a clients to, LAN, one of the VLANs? Does the client get an IP? What are you using for DHCP and DNS on OPNsense?

Hi patient0,
            thanks for the questions, hope I have provided the information requested. If not please let me know.
* OPNsense connection to Internet - WAN port(em0 Interface) is connected to a Nokia Fastmile 5G Gateway set to Bridge mode.
* Internet access from OPNsense - Not sure, I was basing my No Internet access on my laptop taskbar icon showing No Internet Access. How would I check for access from OPNsense?
* Where do you connect a client to - All clients are connected to a 24+4 Cisco Catalyst 3750G managed switch. Ports have been assigned to Vlans and the devices connected according to there use, My laptop - TRUSTED vlan, NVR - SECURITY vlan, Wireless access point - MGMT vlan.
* Does the client get an IP - WAN is set to DHCP due to ISP changing the IP on modem restart, which happen more than I would like due to temperamental power supply. Next investment is a UPC.
* What are you using for DHCP and DNS on OPNsense - ISC DHCPv4 Server and Dnsmasq DNS/DHCP are running. I'm trying to setup OPENdns but I keep getting badauth when I run the test.

The problem I have now is that if I move my laptop from port 5 Vlan-TRUSTED to port 23 Vlan-MGMT_VLAN the Internet is working. So I'm looking at InterVlan routing between TRUSTED and MGMT_VLAN but I'm not sure if this is the right thing to do. From what I've read the MGMT_VLAN doesn't need internet access.

Hi all,
This learning curve is a lot steeper than I expected. It's been almost three weeks now that I have been trying to get things setup but I still don't have internet access. The system is as follows,
bare metal installation of Opnsense on a HP Elitedesk 800 G3 with a HP NC365T 4 port Ethernet adapter giving a total of five interfaces, em0 WAN, ibg1 LAN, igb2 MGMT, igb0 & 3 SPARE. At present the spare interfaces have not been enable but may be assigned to LAGG in the future. The Vlans have igb2 as their parent and are vlan 10 TRUSTED, vlan 20 IOT, vlan 30 GUESTS, vlan 40 SECURITY, vlan 50 DMZ, vlan 60 STORAGE, vlan 99 MGMT. The same vlans are setup in a Cisco 3750G switch. There is a second HP Elitedesk 800 G4 with a bare metal installation of Proxmox but at the moment I have left it turned off. When I check the Firewall/Log Files/Live View all the entries are green, but they are all Interface WAN Out UDP. Would this indicate that the Internet access problem is not being caused by OPNsense?

The HP Elitedesk 800 G3 i7-7700 as per spec sheet has an onboard Intel I219-LM adapter that might do funny things because it is equipped with Intel VPro.

This function may still be active if the device came from a company that uses central device management. You can probably disable it in the BIOS, but YMMV.

The VPro feature had been setup on this computer but as I won't be needing remote access I have disabled it. The WAN is now functioning on the MB nic.

Thank you all for your input.

Hi All, I'm very new to OPNsense & I realise it's going to be a step learn curve so please forgive my if the questions are basic.
I have completed a bare metal installation of OPNsense 25.7-amd64, FreeBSD 14.3-RELEASE-p1, OpenSSL 3.0.17 on a HP Elitedesk 800 G3 i7-7700 3.6GHz with 16 Gb of Ram. The system also has a HP NC365T 4-port Ethernet Adapter, making a total of five network ports. This is where the first issue has developed.
My intention is to use the MB NIC as the WAN port and one of the HP NICs as the LAN. I have tried several times with the MB NIC but every time I restart OPNsense the WAN information on the start up screen is blank. The first time I moved the WAN to one of the spare HP NICs it worked as expected.

With a bare metal installation is there any way to confirm that the MB NIC has the correct drivers installed and that it is functioning correctly?