Can't access Internet with OPNsense running under Proxmox on M720q

[dmopn]

I'm using a Lenovo M720q with a PCI-E 4-port NIC card, which is running Proxmox and then OPNsense in a VM.

In Proxmox, under PVE-Network it shows the onboard NIC as eno1, which is assigned to the Linux Bridge vmbr0 and the CIDR is 192.168.0.199/24 (which is the address I use to access Proxmox) and the Gateway is 192.168.0.02 (which is the address I've assigned to OPNsense). Then the 4-port NIC is shown as enp1s0f0, f1, f2, f3, which are assigned to the Linux Bridges vmbr1, 2, 3, 4.

In OPNsense I have "LAN interface (lan, bridge0)" which I've given the static IP of 192.168.0.2; "OBLAN interface (opt5, vtnet0)" which shows the "WAN interface (opt1, vnet1)" which gets the address "100.x.x.x" from the Cable Modem; then I've labelled the remaining three ports as Port 2,3,4 and they're using opt2/vtnet2, etc.

Under Interface-Other Types I've also created a Bridge with the interface bridge0 and the members OBLAN and Ports 2-4.

Under the DHCPv4 [LAN] settings I've set the Gateway to 192.168.0.2 and I've tried various settings for the DNS servers, including my Adguard Home servers on 192.168.0.20 and 192.168.0.30, and 1.1.1.1.  I've also tried setting the DNS servers under System-Settings-General, and I've tried adding firewall rules for LAN and OBLAN to allow outgoing to port 53, and rules for WAN to allow any traffic in from LAN and OBLAN but I still can't access the Internet, and even trying to ping 8.8.8.8 under Interfaces-Diagnostics doesn't work.

I've also tried powercycling the modem as I read that might be necessary to make it recognise the new router. Plugging the modem back into the ISP supplied router and it works fine, which that router set to 192.168.0.1.

So I'm out of ideas at the moment and I'd be grateful for any help.

[cookiemonster]

Unclear what you want to achieve but if you have a cable modem and you plug a port of the nic into it, it'll get a private ip address. The public one is on the modem. Then the WAN on OPN, having a private address, will need to be made able to not block private addresses. That's one thing.
Then I find it hard to follow your setup. Draw it. Put Ips on it. Explain what you want to be.