Messages

Your ISP or their documentation tells you. It's up to them if you need to set a VLAN (and which one) or not.

but I didn't see a forum for generalized bug reports

Bug reports should go into Github issues.

Works like a charm here. Are you running anything but AGH from Michael's repo? If you don't, consider switching to his newer "Just AGH" repo instead of the full one.

Wenn die Konsole noch nie benutzt wurde, ist bei dem von @patient0 verlinkten Dokument speziell der Abschnitt "Legacy UART vs. UEFI serial" wichtig!

The cables in the walls lead to every NIC in the household. They're coming together in a room where I have them connected to my "main" switch.
So basically it doesn't matter to which NIC in the wall the APs are connected to since the switch makes sure that they can all speak to each other.

So the APs are connected to a cable in the wall on one end and the other end of that cable is connected to a ... NIC? That does not make much sense to me.

In a previous post you wrote:

There is an access point connected to the only NIC in the room.

Maybe we need to start over with the terminology. A NIC is a Network Interface Card. The thing you find inside a PC. So all the time you are saying that your APs are connected to some PC? If you mean a wall outlet - that is not called a NIC.

So what is it?

If I guess, all your APs as well as some wired devices (PCs?) and at least the LAN interface of OPNsense are connected to your switch? Is that the case? Whether there is a cable in the wall with outlets or a simple patch cable providing that connection is entirely irrelevant. The only interesting thing is which device is connected to which.

If that is the case - everything connected to switch - and if that switch is not managed and VLAN capable you cannot use VLANs. Hence your confusion or at least part of it. All devices from your APs to the switch and finally OPNsense must be VLAN capable and configured accordingly.

HTH,
Patrick

Ich habe mir erlaubt, den doppelten identischen Beitrag zu löschen.

Leider kann ich zu der Appliance nichts sagen. Frag doch mal Deciso direkt.

You could try to connect the APs to the "AP VLAN" which offers IP addresses via DHCP but no Internet access by simply not adding the firewall rules that would be necessary for that. But with an IP address the APs should be manageable.

Then create an SSID per VLAN and connect SSID and tagged VLAN at the AP(s). So devices connected to SSID "LAN" will be in VLAN "LAN" and get those 10.0.0.0/24 IP addresses etc.

Where do those network cables in your walls lead? What is at the opposite end of each AP?

Do you have an alternative brand / products to suggest?

Mikrotik.

I think you have uploaded the wrong screenshot ?!

Fixed in the post - thank you.

Sorry, I thought it was clear.

The scroll bar I marked in red should not exist. The box around the rules should not exist. The rules table should be rendered on the page extending downward as far as necessary and the browser scroll bar should be used to get at the lower ones.

Duplicating a function the browser already brings inside the page is bad, IMHO.

Also it does not automatically use all the width I have available ...

Kind regards,
Patrick

What issue exactly? SNMP works without problems here:

I think there is much valuable information for other/new users in this thread that should not be deleted.

All the best,
Patrick

So if the "delete lease" button is important to you, switch to Kea and Unbound - there is no way to run Kea only and not also run a dedicated DNS server.

If you can live without stick to DNSmasq.

Which of the two is your choice only.

I only joined in late to bring in some context and explain why the choices in OPNsense are what they are.

Kind regards,
Patrick

For any Accesspoint to function it does need any kind of IP Address at all

It does *not* need ... 🙂

Nobody's bashing you. I certainly am not. You switched from DNSmasq to Kea and encountered problems, then turned to the forum for help.

I cannot read your mind. I do not know that switching to Kea is entirely disposable for you. I tried to help with the switch to Kea, nothing more, nothing less.

With the same intention my more general "lectures", which I tend to write if the occasion arises, were to give you the necessary information without demanding you "simply read the docs".

Take it or leave it. It's free advice. I'd hate to see you (anyone, really) leave this forum with the feeling they are lectured instead of helped but I have (repeating myself) for decades of networking in my back and I am doing my very best to be helpful. I am still wondering what I could have written differently.

Kind regards,
Patrick