Topics

Hi,

I am just starting my life time goal to have a somewhat serious network at home and to host my own websites.

I have just installed opnsense firewall as the first node from the fiber. I then connect a newvly installed ubuntu server in to the firewall.

My plan, after some googleing and reading, is to create a separate VLAN and DMZ for that server.

What makes it a bit tricky is that I have a truenas scale server with NGINX and proxy thrue cloudflare. So before this I just pointed cloudflare to my public IP and then my asus router would portforward that to my truenas scale server with NGINX to point the traffic to my website server.

Taken this in to account my NGINX would be on separate VLAN not DMZ. To keep it "internal" and more safe. But not sure how it would be able to direct traffic to my new website server within the other VLAN with DMZ setup.

My question is perhaps to broad, since I dont really know where to start this. Do anyone have a guide on this specific thing? Or can point me in the right direction?

Or would you recommend any other (more secure) setup for my website server?

Best regards,

Flamur

Hi everyone,

I'm trying to set up a home network and I've run into some trouble with VLANs.

My setup is:
- OPNsense as the firewall, directly connected to fiber
- HP 2530-8G switch to distribute traffic to a server, access point, and a computer (If I can get this to work that is 😅)

Everything works fine with the default setup. I've followed the official OPNsense documentation and this YouTube guide:

The problem starts when I try to configure VLANs as shown in the video. The guy in the video uses a more professional switch, while mine is older and I'm not even sure if it fully supports the desired needs for this. I'm completely new to this kind of networking—I'm used to basic home routers like Asus—so apologies for any lack of knowledge gaps.

As long as I avoid the VLAN steps, everything runs smoothly.

I've created VLAN 10 in both OPNsense and the switch. Port 1 on the switch connects to the firewall, and Port 5 connects to my computer (running Chrome OS—hopefully that's not causing issues).

I configure the switch via its web GUI using Port 3 (I initially set it up via console and even tried VLAN settings there out of desperation following a guide). According to the video, I should test the VLAN by connecting my computer to Port 5 (assigned to VLAN 10), but when I do that, the computer gets no connection. If I plug it back into Port 3, it works immediately, as I guess this uses the default VLAN setting in the switch.

In the VLAN 10 settings on the switch:
- Port 1 and 2 are set as **tagged**
- Port 5 is set as **untagged**
- The default VLAN is still untagged on the remaining ports

I've tried different IPv4 settings for VLAN 10: disabled, manual, and DHCP. Nothing works - or atleast not as I have tried it.

I've also uploaded all the manuals of the switch (500+ pages) to googles ai and asked for help there, but it only repeats things I've already tried and double-checked.

One thing the AI mentioned is to check: 
"802.1Q: This is the standard protocol for VLAN tagging used by your switch. It must be supported and enabled on the firewall port."
I have no idea how to do that. I've Googled and searched through all the menus in OPNsense but haven't found anything on this or a setting to active this protocal.

I also enabled STP with RPVST mode in the swtich — no change.

Any tips or guidance would be very, very appreciated!

Best regards, 
Flamur (a noob trying for two days straight and starting to loose my mind)