Recent posts

#91

Tutorials and FAQs / Re: OPNsense + PROXMOX + VLANs...

Last post by elreyquerabio - December 16, 2025, 11:53:40 PM

It seems there's not much activity here.

Sadly you didn't provide the requested information. So it's hard to help.

It seems there's not much activity here.

Sadly you didn't provide the requested information. So it's hard to help.

I provided all the info days ago.

#92

25.7, 25.10 Series / Re: Installing on Dell Optiple...

Last post by cookiemonster - December 16, 2025, 11:34:20 PM

It does look like either or both of: installation incomplete / OPN device behind another router.
I suggest going over the installation instructions https://docs.opnsense.org/manual/install.html again. It should make it clearer whereabouts your installation is.

#93

25.7, 25.10 Series / Re: NAT reflection rules being...

Last post by cookiemonster - December 16, 2025, 11:20:21 PM

Reflection for port forwards should be enabled in this case I think, and you might (on this I am not certain) need to see if you need to disable the force gateway.

#94

General Discussion / Re: Lan Interface - VLan 1 - 2...

Last post by Patrick M. Hausen - December 16, 2025, 10:51:04 PM

One is if you want to run multiple layer 2 subnets on a single network interface for instance.

Subnets are layer 3. You can run multiple layer 3 networks/subnets on a single interface/broadcast domain (layer 2) with virtual addresses.

While I agree that you cannot expect anyone new to networking to be comfortable with these terms, the distinction is important. Possibly just a typo on your part ;-)

#95

German - Deutsch / Re: OPNsense mit GPON SFP an D...

Last post by lp24db - December 16, 2025, 10:45:40 PM

Danke für die Infos!

Du hast die Option "kundeneigenen Router" bei Deutsche Glasfaser?

Musstest du ein VLAN einstellen?

Hallo, das würde mich auch sehr interessieren. Seit Anfang November habe ich sporadischen Packetloss hinter meiner OPNsense. Das fällt auch bei Teams und extrem beim Gaming auf. Daher überlege ich auch direkt mit SFP aufs WAN zu gehen. So könnte ich zumindest sehen, ob das NT einen Schlag hat oder nicht bzw. wo der Packetloss genau entsteht.

Bei mir im Portal steht "kundeneigener Router - Anschlussmodell FibreTwist (NT)". Genügt das hierfür oder muss man hier noch etwas umstellen lassen?

Nun noch auf der DG Seite in dem eigenen Kundenkonto die Aktivierungsnummer raussuchen, ggf auch schon vorher wenn man keinen zweiten Internetanschluss betreibt oder über Mobile Daten schauen. 

Wo findet man denn z.B. die Aktivierungsnummer?

plz help
Danke

#96

25.7, 25.10 Series / Re: NAT reflection rules being...

Last post by ltcptgeneral - December 16, 2025, 10:40:42 PM

I've attached the linked image, I just had to downscale it a bit. Block private addresses is already off on WAN, and the WAN address for opnsense is always 192.168.86.2 (dhcp reservation).

#97

25.7, 25.10 Series / Re: New skin "flexcolor"

Last post by Schnuffel2008 - December 16, 2025, 10:26:28 PM

For everyone using my new theme flexcolor (if there is one). I have to admit there's a bug in the black color scheme.

When you set a filter in the firewall's live view, the filter is displayed in white text on a white background, as seen in the attached image black_wrong.

Thanks to the system's ability to flexibly change the skin's colors, you can easily fix this bug by yourself.

To do so, open the following file with a text editor:

/usr/local/opnsense/www/themes/flexcolor/build/color_schemes/black/default_scheme.css

Change the following line:

Line 21: --badgeback: #E6E6E6; /* badge background & progress-bar & blockquote*/
to, for example, --badgeback: #2651A6; /* badge background & progress-bar & blockquote*/

This will turn it a shade of blue, as seen in the image black_right. You can also choose any other suitable color that you like and that provides a good contrast to black and white.

Then log into the OPNsense shell and enter "service flexcolor restart". The new color will then be saved, but only until the file is overwritten in an update or after a reinstallation. I will permanently fix this bug in the next skin release.

#98

Tutorials and FAQs / Re: OPNsense + PROXMOX + VLANs...

Last post by spetrillo - December 16, 2025, 10:21:27 PM

I would prefer to use OPNsense for VLAN termination, so Proxmox is just another server in the server VLAN.

Right now I have these VLANs:

A) VLAN 2: this is my WAN interface and any network devices for mgmt purposes.
B) VLAN 3: this is my server VLAN.
C) VLAN 10: this is my wireless VLAN.
D) VLAN 12: this is my guest wireless VLAN.
E) VLAN 20: this is my streaming VLAN.

Ideally I want setup VLANs on OPNsense, as part of the VM install. I can pass to the OPNsense VLAN a Linux bridge that is VLAN aware and then carve up the needed VLAN interfaces within OPNsense. Does all of this make sense? I am going to build my Proxmox config and OPNsense VM config and will detail them here.

Thanks,
Steve

#99

General Discussion / Re: Behind ISP Router vs DMZ H...

Last post by spetrillo - December 16, 2025, 10:16:26 PM

No you dont lose any information. On the OPNsense side just ensure you do not block any private IPs, bc your WAN address is still technically private. This comes into play with VPN connections.

#100

25.7, 25.10 Series / Re: NAT reflection rules being...

Last post by cookiemonster - December 16, 2025, 09:45:27 PM

Not clicking on links but... I would check that you have disabled "block private networks" on the WAN intrface configuration and that your nat rule prob should work better with "wan address" as the destination.