newbie trying to set up network

[Nullman]

in all honesty - is there anyone around who has used something like this method before that would be willing to walk me through it?

Not only i use it every day for the last 12 years, i implemented such solutions to a lot of people. And they use it for many years not even thinking about it.

is it complicated for a networking newbie?

Its not complicated. Once you figure out how to configure interfaces in opnsense, you are pretty much set. How are you going to configure your access point depends on what that device actually is.

I have already set up opensense box on a mini pc (and gone through some of the settings / watched many tutorials / learned a lot about networks)

In this case, the most complicated part for a newbie would be configuring additional port on opnsense to work on a different subnet. Once you do that, you just attach access point to that port, and you are done.

I have just never worked through using a wireless access point (I feel so old fashioned, lol)

Its because there are endless ways on how you can do this. Not all of them are correct though. Especially if security and performance are your priority. Just because some solution works doesnt mean its implemented correctly.

Much of it is new to me also but in my unqualified opinion an opnsense router coupled with openwrt access point(s) is an appealing combo for a home user. You are able to re-purpose your existing gear or buy cost effective secondhand and there is ample documentation on both. I have a couple of meraki units, running openwrt in 'dumb AP mode', connected via a small managed switch.

Repurposing your old gear is nice if your gear comes from reputable manufacturer that does things correctly,. OpenWRT is great. I love it. However, running OpenWRT on TP-Link is not the same as running it on Cisco Meraki. TP-Link has critical flaws in its hardware and how it handles its port during device booting. Cisco Meraki has no such issues. And lets not even go into build quality and internal hardware choices.

You can in theory connect the APs directly to the opnsense box, but this can lead to interface issues on the router side. Check out the openwrt guides for access point only mode. Then consult the docs here for opnsense vlans.

You just need to make sure that your wireless device is working in AP mode. Avoid running wireless devices in router mode because then you have NAT and additional DHCP server which are not needed in this case.

[lumilumi]

so ive been talking too with my buddy about this

we've come up with the solution of

ISP modem -- connecting to mini PC running opensense

then repurposing my old "openwrt one" (openwrt one is a box that openwrt designed to run openwrt / supports their funds)
to run that as the wifi piece (since I already have this box)

I may switch the openwrt one to a netgear: https://www.amazon.com/NETGEAR-Wireless-Access-Point-WAX210PA/dp/B0DLDMHCWC


how do I configure the settings in order for the mini pc to "send the internet"  to the openwrt one, so that the openwrt one can be my wifi access point?

[Nullman]

how do I configure the settings in order for the mini pc to "send the internet"  to the openwrt one, so that the openwrt one can be my wifi access point?

You have  choices. Each one requires OpenWRT one operating in AP mode.

1. You connect OpenWRT one to your existing LAN port.
2. You configure another port/subnet on opnsense box and connect your OpenWRT to that port.

Number 2 is proper way of doing thigs.

[nero355]

how do I configure the settings in order for the mini pc to "send the internet"  to the openwrt one, so that the openwrt one can be my wifi access point?

Just connect it to your network and create the SSID and you are DONE! :)

However if you have VLANs on your OPNsense then the whole story gets totally different and you need to do some reading before getting everything up and running...



But if I may ask :

What was the reason you have chosen to use OPNsense if you are having issues with this kind of stuff ?!

Why not simply buy a nice "All-in-One" Router or something targeted more at regular home users so to speak ??

[RobertoZ]

not to say I know much - but isn't llm generated code extremely unsecure as well? Wouldn't that ruin the whole point of trying to use a firewall?

The OpenWRT One is a great piece of kit.  If you are using is as just an access point, it does no firewall duties, OpenSense will handle that. 

There are numerous guides and tutorials on the web on how to setup an OpenWRT router as just an AP.  It takes not even five minutes.  Turn off all DHCP and DNS services.  Configure it to get an automatic IP from upstream DHCP server (OpenSnese) and setup your SSID's and go.