Can I do this setup with OPNsense?

Started by hcape, January 12, 2024, 08:43:18 AM

Previous topic - Next topic
Hello I am (hopefully) a new OPNsense user and have a bit peculiar home office setup. I am currently using an Ubuntu based firewall but would need something a bit stronger firewall/router using the current PC hardware.

So I would like to know if it is possible to build an OPNsense FW with the following setup:

I have two WANs (5G and FC). I would also like to have two LAN interfaces: DMZ for servers and LAN for family members, printers, WLAN.

I just got the FC and for that I would prefer routing DMZ to internet via 5G (which has fixed IP) and LAN via FC (and later also moving DMZ to use FC  if/when DDNS works / or I get the fixed IP via FC). I try to minimize the hassle with the external users of DMZ servers.

So does this look like an acheivable goal usin OPNsense?

wbr

hank

Hi,

to answer your question: Yes, it is.

However, keep in mind that this is not the standard setup, so some manual work is required.

You may want to have a look to "policy based routing" in the docs and how to connect to your 5G / FC ISP correctly. This will probably require some specific interface setup.

Using policy based routing you can define which traffic goes where. However, there might be some pitfalls.

Thank you.

I really appreciate the pointer to policy based routing. I am basically a programmer and a lesser extent an admin and even lesser network guy but let's find out how things torn out.

I will probably try this in this weekend. Fortunately I have an extra HDD so in case of emergency I can "go back" to the Linux installation if things go badly just by exchanging the disks...

wbr

hank