"Recent posts
#1
General Discussion / Asymmetric routing of manageme...
Last post by userfw - August 22, 2026, 10:46:08 PMI am experiencing some strange issues with management traffic (https and ssh) over a multi-WAN configuration: TCP SYN goes to one of the interfaces whose address I'm trying to connect to and return traffic exits from the other interface with higher gateway priority hence chosen as default, I thought that this wasn't supposed to happen with reply-to.
There aren't any PBRs or static routes that can influence this choice. I have another opnsense instance elsewhere configured almost identically that is not exhibiting this behaviour.
Any hints at where to look?
There aren't any PBRs or static routes that can influence this choice. I have another opnsense instance elsewhere configured almost identically that is not exhibiting this behaviour.
Any hints at where to look?
#2
Tutorials and FAQs / Re: OPNsense does not recogniz...
Last post by Ice21 - August 22, 2026, 10:42:49 PMThank you for the clarification! I managed to get it to work. With your response, link, and this video, I got ethernet connection now. I bridged OPT1 (Netgear router) and OPT2 (network switch) and assigned them to LAN.
#3
General Discussion / Settings tab position in Autom...
Last post by camellia - August 22, 2026, 10:12:31 PMHi everyone
In "Interfaces: Neighbors: Automatic Discovery," the Settings tab is located in the first tab position (the most left tab), while the Discovered Hosts tab is located in the last tab position (the most right one). With this order, the Discovered Hosts is not displayed first when a menu item is selected.
Is this the intended order?
In "Reporting: Health" and "Reporting: Unbound DNS", the main information tab is located in the first tab position, while Settings tab is located in the last tab position. With this order, the main information is displayed first when a menu item is selected.
I think this is the natural order.
In "Interfaces: Neighbors: Automatic Discovery," the Settings tab is located in the first tab position (the most left tab), while the Discovered Hosts tab is located in the last tab position (the most right one). With this order, the Discovered Hosts is not displayed first when a menu item is selected.
Is this the intended order?
In "Reporting: Health" and "Reporting: Unbound DNS", the main information tab is located in the first tab position, while Settings tab is located in the last tab position. With this order, the main information is displayed first when a menu item is selected.
I think this is the natural order.
#4
26.1, 26,4 Series / Re: Upgrade questions
Last post by zuzuvela - August 22, 2026, 10:07:51 PMHi Patrick,
OK, thank you, is this visible in the Firewall page?
What do you think about the other 2 items?
Thank you.
OK, thank you, is this visible in the Firewall page?
What do you think about the other 2 items?
Thank you.
#5
Tutorials and FAQs / Re: OPNsense does not recogniz...
Last post by meyergru - August 22, 2026, 09:45:20 PMA router is not a switch.
Conceptually, OPT1 and LAN are two different interfaces. So it all depends on how you configure them. What you probably want is to bridge both physical ports to one logical interface, not have to different interfaces with different subnets.
This is explained here.
If that is something different than you actually want, you should probably read this first.
Conceptually, OPT1 and LAN are two different interfaces. So it all depends on how you configure them. What you probably want is to bridge both physical ports to one logical interface, not have to different interfaces with different subnets.
This is explained here.
If that is something different than you actually want, you should probably read this first.
#6
Tutorials and FAQs / OPNsense does not recognize ne...
Last post by Ice21 - August 22, 2026, 09:15:14 PMFW4B
WAN = Internet
LAN = Netgear router as AP
OPT1 = TP-link unmanaged network switch
I have a laptop connected to the switch and I'm having issues getting my new OPNsense router to recognize anything from that switch. According to this other post, I followed it by adding the firewall rules but I still can't get internet connection via switch ethernet. Like the OP of that post, I too am a noob at this. Took me a couple of hours setting up the netgear router wifi to work as AP only to find out that it turns off the wifi when switching to AP as well as enabling guest connections. Both have been fixed but this network switch issue is stumping me.
WAN = Internet
LAN = Netgear router as AP
OPT1 = TP-link unmanaged network switch
I have a laptop connected to the switch and I'm having issues getting my new OPNsense router to recognize anything from that switch. According to this other post, I followed it by adding the firewall rules but I still can't get internet connection via switch ethernet. Like the OP of that post, I too am a noob at this. Took me a couple of hours setting up the netgear router wifi to work as AP only to find out that it turns off the wifi when switching to AP as well as enabling guest connections. Both have been fixed but this network switch issue is stumping me.
#7
26.7 Series / Re: Protectli vault FW6A with ...
Last post by meyergru - August 22, 2026, 09:13:42 PMI suggest you to read:
https://forum.opnsense.org/index.php?topic=42985.0, especially point 3
and
https://forum.opnsense.org/index.php?topic=44159.0
if you have not done so already.
On a side note: "VLAN 1" is special - on some switching platforms, it denotes the "untagged" VLAN, on some, it doesn't. So be sure that your switch, your Proxmox installation and OpnSense are in sync about what "VLAN 1" means in terms of bridge view, logical and physical interface views, respectively. Also check that port 5 has PVID 20; making it an untagged member of VLAN 20 only controls egress tagging.
You will find that you have chosen an environment with the maximum amount of potential complications. If you do not have an advanced level of networking knowledge, you will have a steep learning curve ahead - and I do not mean that condescending, but as an unbiased early warning, only considering the fact that this was your first posting here. What I mean by that is that I doubt that there is a step-by-step guide and an LLM will probably be of little use, either, especially if it is a free or local variety with limited capabilities.
https://forum.opnsense.org/index.php?topic=42985.0, especially point 3
and
https://forum.opnsense.org/index.php?topic=44159.0
if you have not done so already.
On a side note: "VLAN 1" is special - on some switching platforms, it denotes the "untagged" VLAN, on some, it doesn't. So be sure that your switch, your Proxmox installation and OpnSense are in sync about what "VLAN 1" means in terms of bridge view, logical and physical interface views, respectively. Also check that port 5 has PVID 20; making it an untagged member of VLAN 20 only controls egress tagging.
You will find that you have chosen an environment with the maximum amount of potential complications. If you do not have an advanced level of networking knowledge, you will have a steep learning curve ahead - and I do not mean that condescending, but as an unbiased early warning, only considering the fact that this was your first posting here. What I mean by that is that I doubt that there is a step-by-step guide and an LLM will probably be of little use, either, especially if it is a free or local variety with limited capabilities.
#8
26.7 Series / Protectli vault FW6A with Prox...
Last post by DenisB_13 - August 22, 2026, 08:18:38 PMI am very new to this and I'd greatly appreciate your patient assistance.
OPNSense 26.7amd64, FreeBSD 15.1-RELEASE-p1, OpenSSL 3.5.7
OPNSense is a PROXMOX vm.
I have an internet router connected to WAN port of Protectli. I have LAN port of protectli connected to port 8 of TLSG108PE.
TLSG108PE is set up as follows:
VLANID VLAN_Name Member_Ports Tagged_Ports Untagged_ports
1 Default 1-4,8 8
20 IoT 5,8 8 5
I think I have PROXMOX and OPNSense configured correctly. Also I have done the chatgpt hokey pokey checking each step step of the way. I've checked this with CHATGPT twice with no success.
Symptom - Any computer connected to port 1 or 2 or 3 or 4 correctly receives 192.168.10.x/24 ip address. No computer connected to port 5 receives any ip address from the IoT vlan configuration of 192.168.20.x/24 subnet. DHCPDISCOVER never gets a DHCPOFFER.
I know this is a "newbie" question and I might have overlooked this in the earlier threads or threads for earlier versions. I'd greatly appreciate assistance geared toward someone who has never done this before....because I've never done this before.
OPNSense 26.7amd64, FreeBSD 15.1-RELEASE-p1, OpenSSL 3.5.7
OPNSense is a PROXMOX vm.
I have an internet router connected to WAN port of Protectli. I have LAN port of protectli connected to port 8 of TLSG108PE.
TLSG108PE is set up as follows:
VLANID VLAN_Name Member_Ports Tagged_Ports Untagged_ports
1 Default 1-4,8 8
20 IoT 5,8 8 5
I think I have PROXMOX and OPNSense configured correctly. Also I have done the chatgpt hokey pokey checking each step step of the way. I've checked this with CHATGPT twice with no success.
Symptom - Any computer connected to port 1 or 2 or 3 or 4 correctly receives 192.168.10.x/24 ip address. No computer connected to port 5 receives any ip address from the IoT vlan configuration of 192.168.20.x/24 subnet. DHCPDISCOVER never gets a DHCPOFFER.
I know this is a "newbie" question and I might have overlooked this in the earlier threads or threads for earlier versions. I'd greatly appreciate assistance geared toward someone who has never done this before....because I've never done this before.
#9
General Discussion / Re: Has the OPNsense team appl...
Last post by serving_myself - August 22, 2026, 07:47:17 PMQuote from: franco on April 22, 2026, 12:57:52 PMNot on your radar at the moment.
Cheers,
Franco
Hello Franco,
Has something changed after these past few months?
I'd like to voice an opinion on this subject as a (home) user of OPNsense.
Major vendors of commercial network security products have all joined the party. Of course, from the outside, it may seem like a marketing/PR stunt ("let's join to show everyone how serious we're about security", "X joined so we also have to, otherwise X's sales will say to the customers that we aren't serious enough about security", etc.). I can't know what were the incentives at the start of it, but it's certainly not the case today.
During the past few months, the number of security-related software updates in some relevant commercial software products increased significantly. I know it is taken very seriously inside those companies.
Leaving aside the political, economic, and social aspects of AI as a phenomenon, in my opinion, ignoring its direct impact on the security/tech landscape is not pragmatic.
I don't know what requirements a FOSS project like OPNsense would have to meet to get involved in Glasswing (and I appreciate the amount of work this can potentially generate for maintainers), but my suggestion would be to at least have a look and try to get access.
After all, if getting access itself is not a lot of work, the worst that could happen is that all you get is useless false positives and/or minor things not worth fixing (immediately). In return you will learn the current baseline for frontier AI security capabilities in the context of OPNsense codebase and get a confirmation that (at least at the moment) OPNsense is safe in this brave new world. And us, users, will also get a peace of mind.
Of course, I don't have your full perspective, so it'd be valuable to at least understand why not.
#10
General Discussion / Re: PBR from self?
Last post by franco - August 22, 2026, 05:47:39 PMIt should work on rules with the out direction. In the past that was bound to floating but I'm not sure if that's still the case.
Cheers,
Franco
Cheers,
Franco
