Interfaces - pfSense vs OPNsense

[Freebee5687]

Hi! 

With the news of Netgates removal of the pfSense + Home/Lab license I decided to take this opportunity to try OPNsense on my backup firewall.

Everything is going OK but there there is a difference between the two that confuses me.

I had this working on my x86 PC with 2x NICs, but what is showing is the SG-1100 configuration.

 I had 3x VLANs hanging off of that internal NIC (LAN side) .... 4091 (internal LAN) with interface ip at 172.16.17.1, 4092 (guest) with interface IP 172.16.19.1 and 1618 (IOT) with interface ip at 172.16.18.1.

Each VLAN / Interface has its own DHCP server running for those networks throughout the house.

I am struggling with the opnsense InternalNetworkConnection interface.  Can I disable it at this point?

I want the opnsense box to be accessible within the internal LAN network at 172.16.17.1. I restrict access to the GUI on IOT and GUEST via rules.

Can I just delete the InternalNetworkConnection interface and set LAN (opt1) to 172.16.17.1 ?

Thanks in advance!

[franco]

If everything is wired correctly, yes. But you will need a temporary network and IP for LAN (opt1) in order to reach it after removing 172.16.17.1 and the old interface in order to access the GUI and change the IP for LAN (opt1) to 172.16.17.1 afterwards.


Cheers,
Franco

[Freebee5687]

Thanks ! I moved the InternalNetworkConnection to .198 and can access it fine at .198. I moved LAN (opt1) to .1.

Cannot access gui at .1 but I can at .198. Although that’s probably because I am hard wired from a laptop at .199 without VLAN tags …

Once I get my rules for my LAN / IOT and GUEST interfaces copied over I will move it to the main firewall position and confirm I can access it at .1.

Thanks for the reply !

UPDATE: added VLAN tag 4091 to the laptop NIC, connected to .1 and deleted the internal connection.  All good. Thanks again!

[franco]

> Cannot access gui at .1 but I can at .198. Although that’s probably because I am hard wired from a laptop at .199 without VLAN tags …

Yep, nice work and welcome


Cheers,
Franco