"Recent posts
#1
26.7 Series / Re: CPU Microcode and Bootload...
Last post by Aveamantium - Today at 04:44:26 AMThanks Patrick and appreciate the info...!
On the boot loader, I was just hoping that at some point it became an option to update within the GUI. Not that I'm opposed to using the shell...
Thanks Again!
On the boot loader, I was just hoping that at some point it became an option to update within the GUI. Not that I'm opposed to using the shell...
Thanks Again!
#2
French - Français / Re: Un cabinet d'expertise com...
Last post by passeri - Today at 03:11:25 AMQue ce soit par segmentation par interfaces ou par utilisation de VLAN sur une seule interface, je séparerais sans hésiter la comptabilité de la réception et des autres fonctions administratives. Le contrôle d'accès aux serveurs relève généralement de leur gestion et non de celle du routeur.
Le choix entre VLAN et segmentation d'interfaces dépend de la configuration actuelle ou prévue du câblage, des commutateurs et du réseau Wi-Fi. Les commutateurs sont-ils compatibles VLAN ? L'OPNsense est-il une solution prête à l'emploi permettant de dupliquer l'infrastructure existante ?
(Traduit)
Le choix entre VLAN et segmentation d'interfaces dépend de la configuration actuelle ou prévue du câblage, des commutateurs et du réseau Wi-Fi. Les commutateurs sont-ils compatibles VLAN ? L'OPNsense est-il une solution prête à l'emploi permettant de dupliquer l'infrastructure existante ?
(Traduit)
#3
26.7 Series / Re: No Web_GUI if LAN is DHCP ...
Last post by lmoore - Today at 01:25:29 AMMy configuration has it explicitly set to LAN.
#4
26.7 Series / Re: CPU Microcode and Bootload...
Last post by Patrick M. Hausen - Today at 12:30:29 AMOPNsense 26.7 uses early loading and will hang at boot if you have an outdated boot loader.
OPNsense 26.7.1 uses late loading and will work regardless of the boot loader version.
Anyway it is always advisable to keep your boot loader up to date just like the rest of the system.
OPNsense 26.7.1 uses late loading and will work regardless of the boot loader version.
Anyway it is always advisable to keep your boot loader up to date just like the rest of the system.
#5
26.7 Series / CPU Microcode and Bootloader
Last post by Aveamantium - Today at 12:18:01 AMBeen using OPNSense for awhile now and wanted to extend my thanks for all the hard work!
This whole microcode issue has me a bit confused so I was wondering if the "late load" feature was/will be implemented so you don't need to update the bootloader? On that note, seems like an up to date bootloader might resolve other issues that have cropped up here/there in these forums. Would there be a way to include this as an option with future updates or is it more complicated than that?
No worries either way, just more of a curiosity... Again, thank you for the awesome firewall!
This whole microcode issue has me a bit confused so I was wondering if the "late load" feature was/will be implemented so you don't need to update the bootloader? On that note, seems like an up to date bootloader might resolve other issues that have cropped up here/there in these forums. Would there be a way to include this as an option with future updates or is it more complicated than that?
No worries either way, just more of a curiosity... Again, thank you for the awesome firewall!
#6
Virtual private networks / Re: IPSEC VPN Traffic being al...
Last post by n2so - August 03, 2026, 11:26:54 PMIf anyone else is running into the same issue, here's what solved it for me:
Upgrade to **OPNsense 26.1** (or newer), then configure your VTI to **skip firewall rules**. Also, make sure you're using the **IPsec interface** for your outbound NAT rules.
After making those changes, the issue was resolved in my case.
Upgrade to **OPNsense 26.1** (or newer), then configure your VTI to **skip firewall rules**. Also, make sure you're using the **IPsec interface** for your outbound NAT rules.
After making those changes, the issue was resolved in my case.
#7
German - Deutsch / Re: Hardware für 10gbit
Last post by Patrick M. Hausen - August 03, 2026, 10:15:39 PMDie Specs von Deciso sprechen von 8.5G Port zu Port.
Ich erwarte von einem Teil mit 2x 10G Interfaces nicht unbedingt volle 10G Durchsatz von einem Client von/zum Internet. Bei mir hängt die DEC750 mit 2x 10G LACP am zentralen Switch. Da der ganze Rest vom Netz 1G ist, reicht das locker, um niemals zum Engpass zu werden, über alle VLANs hin und her.
Ich erwarte von einem Teil mit 2x 10G Interfaces nicht unbedingt volle 10G Durchsatz von einem Client von/zum Internet. Bei mir hängt die DEC750 mit 2x 10G LACP am zentralen Switch. Da der ganze Rest vom Netz 1G ist, reicht das locker, um niemals zum Engpass zu werden, über alle VLANs hin und her.
#8
26.7 Series / Re: Upgrade to 26.7 from 26.1....
Last post by HarveyEllis1 - August 03, 2026, 10:13:22 PMQuote from: nero355 on August 03, 2026, 02:36:15 PMOK, but could you post the exact RealTek NIC models then and which driver you are using for them ?
For others who might find this topic via the Forum Search or a random Search Engine and stuff... ;)
The NIC are built into motherboard of a mini PC.
re0: <Realtek PCIe 2.5GbE Family Controller> port 0x4000-0x40ff
(same for re1)
Driver working with Opnsense 26.7.1 is: realtek-re-kmod-1102.01.1500068
I suspect the issue with upgrade from 26.1.11 to 26.7 was related to FreeBsd version 14 (rather than version 15) of the Realtek driver being in place during update process.
I did not have a problem with ISO 26.7 fresh install and had working NICs.
I did notice that RealTek driver was updated when upgrading from OpnSense 26.7 to 26.7.1
As a side note, I use a USB based Ethernet adapter (ASIX AX88179B) to provide access to a management network.
Prior to Opnsense version 26.7 this interface would flap on a rare occasion.
After update to Opnsense 26.7 it flaps constantly, runs out of buffers, and interface becomes inaccessible.
This is a known FreeBSD 15 issue for ASIX AX88179B chip set.
There is a fix for this (force use of CDCE driver) - https://forums.freebsd.org/threads/ugreen-usb-hub-with-ethernet-adapter-asix-ax88179b-quirk.101459/
It works!
#9
26.7 Series / Re: VLAN devices are on LAN IP...
Last post by nero355 - August 03, 2026, 10:05:39 PMQuote from: dseven on August 03, 2026, 03:51:35 PMSo... damned if you do, damned if you don't 🤣🤣Well... you shouldn't... so... you have got a choice... sort of... LOL! ^_^
#10
German - Deutsch / Re: Hardware für 10gbit
Last post by meyergru - August 03, 2026, 10:03:55 PMEs stimmt, die 750er hat bei mir auch nur ca. 7 Gbit/s maximal gebracht und dazu musste man schon tunen - ich habe die aber auch nicht empfohlen. Der wesentliche Vorteil ist der niedrige Verbrauch und die passive Kühlung. Spätestens mit IDS ist bei 10 Gbps.
