Messages

Does the configuration backup save everything, or do any manual adjustments need to be made after restoring the config?

What is set or changed using the UI gets committed to the config file that is then used for import. Anything else is not i.e. done in the filesystem directly.

After the interface change the reporting database might have become corrupted. Just a guess.
Perhaps resetting would help? Reporting > Settings > Reporting Database Options.
There are options to reset / repair but beware, I imagine there could be data loss. I am not certain if the actions taken are destructive.
In the past when I changed interface hardware I had to do this. It didn't matter to me if resetting would reset to zero data but it fixed my reporting problem similar to yours.

I was going to ask about Network Interfaces: All (recommended) but that is set correct.
At this point I wonder if you have one of those obscure cases of VLANs mixing traffic with tagged and untagged. Can you check for that? What we're looking for is the setup, where your trunk to OPN has ONLY tagged traffic.

If creating swap is at all possible, it is hardly a bad idea to provide it to a system. Even when there is what appears to be plenty of memory for it.
It's quite easy to see most unix-like/*bsd systems with suitable amount of memory, they swap from time to time, even if in small amounts. For the sake of a few gigabytes of storage, it's an easy and cheap help to give it.

Have set the range and lease time but its not picking the new leases its still using old configurations

You need to tell the local clients to renew their lease manually.

For Windows:
ipconfig /release
ipconfig /renew

But you need to do some research and use AI. Its great for these kinds of things.

My Current Range
192.168.2.101 -  192.168.2.200

what am getting
eferred)
   IPv4 Address. . . . . . . . . . . : 192.168.0.171(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.252.0
   Lease Obtained. . . . . . . . . . : 12 June 2026 11:48:37
   Lease Expires . . . . . . . . . . : 12 June 2026 13:48:36
   Default Gateway . . . . . . . . . : fe80::f690:eaff:fe01:fb24%17
                                       192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1

Is that a typo in the dhcp server address, which is different to the address assigned to the client?

Instead of making us guess, can you please tell the setup, what is the OPN version, which dhcp service are you using on it, what are the devices involved in the setup? Perhaps a router behind another router. Maybe more than one dhcp server running on the network.

Yes, let the defaults be. You don't need swap.

IMHO running any system without swap is not a very good idea. If the system needs it for any reason, it is best for it to have it than not.

Seems like a virtual machine but that's not in itself a problem. Many run it on VM without problem.
If external monitoring is not setup or available, you need to regularly check for running processes to see which ones are using up the memory.
Telling what the setup and running services and plugins would help too.

For me I find it still useful for exposed applications at L7. I have some public-consumed services behind haproxy on OPNSense. I see many hits there attempting to use exploits that crowdsec appears to identify and stop at the ssl handshake failed attempt level or some other probing scenarios.
I'm keeping it despite as you say the now fairly noisy upselling, and that they seem to not improve the functionality of the plugin for the user.

"Freezes" can be for various reasons, from configuration to hardware or a combination so each user experiencing a freeze will likely have a different problem and therefoer need a different path to diagnostic.
Piling each a request for an "update" or "progress" on "the issue" will not help anyone. It'll become just a "me too fest".
Open a new thread with your setup so you can be helped.

Single user mode as per https://docs.opnsense.org/troubleshooting/password_reset.html but you need to be able to use the console, either physical or in this case virtual. So if you can't get to it, there is no way to change it.

and before starting, a reminder that if you have more than one memory stick, memtest will register errors if there are any but won't point which stick/slot they are coming from. Hence the need to do one stick at the time.

Well I learned something today. I will need to read up on these concepts.
Seems like I was thinking wrong about how the OP could have wanted to see if possible with OPN. My thinkng was along the lines as I said of F5 BigIP hardware load balancers ie https://f5-agility-labs-adc.readthedocs.io/en/latest/class1/module1/lab1.html https://clouddocs.f5.com/training/community/adc/html/class1/module1/lab1.html

I suspect the OP wants to use something akin to the F5s virtual ips where you have in the UI a way to pretty much do a load balancer setup. Say you have a vip of 172.26.27.1 that "points" to both 192.168.10.1 and 192.168.10.2 and chose your algorithm like round-robin.
Essentially what we can do with a reverse proxy in OPN but I don't know what the flow would be to setting up the vip. Perhaps creating a VIP in the UI first with a type "IP Alias" but that gives only a vip assigned to an interface. Or maybe I totally misunderstand the question :)

That's what it will look like in the default logging as the firewall ip will be doing NAT for your clients. You still need to track the client making the original request as I said. Adding additional logging on the firewall is one way to assist it.

> Trying to find were this is coming from: let out anything from firewall host itself (force gw) (WAN)
is the outbound leg from the firewall out to this ip.
You should be able to find the corresponding entry from the LAN of the device attempting the connection. It should be just next or very near it but you might need to enable that log in Firewall > Settings > Advanced: " Log packets matched from the default pass rules " likely.