Topics

Hi all.

I want the following but have no clue how to do this the right way.

On my opnsense box with multiple ethernet ports, I have one port that goes to my managed main switch serving all my VLAN's and this works great.

But, to offload some traffic coming via that route of my main managed switch, I would like to have one of those VLAN's to be also present on of the free ports on the opnsense box directly.

How can I achieve this the right way? Just create an VLAN interface with the same id on one of the free ports? Or will this not work?

The VLAN needs to be also available through my managed switches.

Can somebody please point me into the right direction?

Running OPNsense 23.7.11-amd64, I can´t select multiple inverted Destinations in the pull down menu in Rules.

I am trying to block access from a VLAN to other VLAN's I made.

A couple of years back I thought I could select multiple Destinations in rules when you selected Inverted. Now I can only select one destination.

I clone now the first rule that allows ipv4 to any rule with an inverted selected to the destination ! LAN net and did that with all the destinations not allowed. But now I have a list of the same rules on that vlan interface all doing the same thing but with a different ! destination. Looks weird now. Is this the way to go how to do this? :o

Ik zie hier wat raars in mijn firewall log wat ik niet kan herleiden waar het nu vandaan komt.

                                                         SOURCE                     DEST                                      LABEL
wan      2022-04-10T11:07:19   10.160.48.1:67   255.255.255.255:68   udp   Block private networks from WAN   
wan      2022-04-10T11:07:16   10.162.32.1:67   255.255.255.255:68   udp   Block private networks from WAN   
wan      2022-04-10T11:07:15   10.162.32.1:67   255.255.255.255:68   udp   Block private networks from WAN

EDIT:
Hoogstwaarschijnlijk komt dit van Ziggo zelf af die firmware pushed naar hun ARRIS modems. Het ARRIS modem zit nu als doorgeefluik verbonden met onze OPNsense bak en nu kom het daar op binnen.

https://forum.netgate.com/topic/108774/firewall-log-showing-wan-port-67-68-dhcp-entries-please-help-explain

From a security point of view which one is better?

Under firmware in the gui you can select the flavour.

The Default is OpenSSL.

Are there any pros or cons choosing one over the other?