Messages

If you want to get it fixed, you report it to upstream FreeBSD, https://bugs.freebsd.org. With a way to reproduce the issue, link to this forum thread, using less words if you can. Not sure how many people read a short story like that.

At what network size and data throughput does this become relevant?

VPP is a very fast and efficient packet processor and would allow to reach 10Gbit throughput on small, fanless devices.
E.g. the DEC740 can't do 10Gbit with OPNsense (it does 5-6 Gbit) and if the NICs were supported (which they are not) I could saturate my line.

Having said that: VPP seems best suited for routing, since it only supports ACLs (but they seem to be able to do firewall-ish rules).

Two articles about VPP on FreeBSD from Pim van Pelt (who used to run the SIxXS tunnel service with Jeroen Massar) for the interested:

https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-1/
https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-2/

He does work and develop for/with VPP (on Debian) and has got a lot of interesting articles about it, in a routing context.

Searching the internet for "Sonicwall TZ300 cpu specs" returns https://www.reddit.com/r/sonicwall/comments/m6aemk/ram_and_cpu_specs_of_tz_models/.

It lists a few Sonicwall models, the TZ300 is one of them but there seem to be multiple generation.

TZ 300 1GB Ram 1.6GHz (2x 800MHz Mips64 Octeon Processor)

If correct, Mips64 would be a show stopper in any case.

Addition: In an TZ300 unboxing video (https://www.youtube.com/watch?v=ath1kafIRVM) at 9:25 it shows in the GUI 2x 800Hz Mips64 Octeon Processor under Dashboard / Multi-Core Monitor. You can verify it yourself if the SonicOS is still on your device.

Why are people all of a sudden using the exact same overspecific template to ask simple questions on this forum?

I'm sure it's AI generated from a users question.

Was hat Dich davon abgehalten meine Fragen exakt zu beantworten, hier diese nochmals:

"Zeig doch mal den Logeintrag für den Client der erfolgreich eine IPv4 bekommt im gleichen VLAN, scheint für mich grad unwahrscheinlich.

Welche OPNsense Version setzt Du ein? Welchen DHCP Server setzt Du ein, DNSmasq oder KEA DHCP? Und ist bei dem DHCP Server 'Firewall rules' (KEA) oder 'DHCP register firewall rules' (DNSmasq) gesetzt?"

Use 'ichwd_load' instead of 'ichwd_enable', see https://man.freebsd.org/cgi/man.cgi?query=ichwd

Zeig doch mal den Logeintrag für den Client der erfolgreich eine IPv4 bekommt im gleichen VLAN, scheint für mich grad unwahrscheinlich.

Welche OPNsense Version setzt Du ein? Welchen DHCP Server setzt Du ein, DNSmasq oder KEA DHCP? Und ist bei dem DHCP Server 'Firewall rules' (KEA) oder 'DHCP register firewall rules' (DNSmasq) gesetzt?

Would please provide more information? Where on the Fritzbox do you connect the OPNsense box, LAN or DMZ? Is OPNsense WAN usually getting a Fritzbox LAN address (192.168.178.xx ?). Do you set a static WAN to get it working? Have you changed anything on the Fritzbox? What OPNsense version are you using? OPNsense as a VM or a physical device?

Does a client connected to Lan2 get an IP? Can you post screenshots of interface, dhcp and firewall rules?

Is the ASUS AP is in AP mode, not router mode I assume? And do you restart the AP if you switch between LAN and lan2?

You will of course need a firewall rule on lan2, similar to the main LAN. Per default all traffic is blocked.

I usually clone the main LAN rule, edit the clone and change the interface to the new network (lan2 in your case).

I added 77.**.**.49 as a Gatewa

You set that gateway in the WAN interface settings, in the field "IPv4 gateway rules"? If yes, then I don't know, works for me.

ran the setup wizard and set the WAN address to IPv4 static 77.**.**.55/28

If you set the WAN as static you have to manually set/choose the gateway in the interface settings. Setting a gateway makes it a WAN connection (for the system) and then the NAT rules are created automagically.

Zenarmor is not yet ready for 26.7, read official statement here https://forum.opnsense.org/index.php?topic=52376.0, and more about in the Zenarmor category.

Are you sure the OPNsense forum is the ideal place to ask that question? I for one have never setup Wireguard using NetworkManager, only using wg-quick.

Best to ask in either the forum of the Linux distribution you are using or NetworkManager forum.

Now I have to find why my Asus router dont get enternet from port 3, whereas PC getting enternet thru port 2.

Is the Asus AP on port 3 on it's own network or on the same LAN the PC? If on the same LAN as the PC, did you createa bridge in OPNsense?