Skip to content

OPNsense_setup.md

Latest commit

 

History

History
244 lines (140 loc) · 3.92 KB

OPNsense_setup.md

File metadata and controls

244 lines (140 loc) · 3.92 KB

🛡️ OPNsense Configuration Guide (Proxmox Lab)

📺 Installation Guide

Follow this video to install OPNsense on Proxmox:
https://www.youtube.com/watch?v=-UMcrTTWbuU

1. 🏷️ Create VLANs

Log in to OPNsense and navigate to:

Interfaces > Devices > VLAN

1.0

Click the “+” button to add a new VLAN.

🔧 Example Configuration (VLAN 10)

  • Device: vlan0.10
  • Parent Interface: vtnet1 (LAN)

    Use the interface configured during the initial setup

  • VLAN Tag: 10

Click Save

1.1

➕ Additional VLANs

Repeat the same steps to create:

  • VLAN 20
  • VLAN 30
  • VLAN 40
  • VLAN 999

⚠️ For VLAN 999, use the WAN interface as the parent.

2. 🔌 Assign Interfaces

Go to:

Interfaces > Assignments

  • Assign all newly created VLAN interfaces
  • Click Save

2

3. 🌐 Configure Interfaces

For each assigned interface:

  • ✅ Enable the interface
  • 🔒 Check Prevent interface removal
  • 🌍 Set IPv4 Configuration Type to Static IPv4
  • 🧾 Assign the appropriate IP address under Static IPv4 Configuration

Click Save

3.0

3.1

Repeat for all interfaces.

4. 🚪 Gateway & Routing Configuration

🌍 Create Gateways

Go to:

System > Gateways > Configuration

Click “+” to add gateways:

  • 🌐 INTERNET Gateway
  • 🚪 WAN Gateway

4.1

4.2

4.0

🧭 Configure Static Routes

Go to:

System > Routes > Configuration

Click “+” to add routes.

4.4

4.3

5. 🧩 Install Required Plugins

Go to:

System > Firmware > Plugins

  • ✅ Enable Show community plugins
  • 📦 Install the following:
    • os-frr (routing / OSPF)
    • os-net-snmp (monitoring)

5.0

After installation, reboot OPNsense:

Power > Reboot

6. 🔄 NAT Configuration

🏷️ Create Alias

Go to:

Firewall > Aliases

Click “+” and configure the required alias. Click Save.

6.0

6.1

🌐 Configure Outbound NAT

Go to:

Firewall > NAT > Outbound

  • ⚙️ Select Manual Outbound NAT
  • Click Save

Click “+” to add NAT rules:

  • 🌍 INTERNET NAT
  • 🚪 WAN NAT

Click Save and Apply Changes

6.2

6.3

7. 🧭 Routing (OSPF) Configuration

⚙️ Enable Routing

Go to:

Routing > General

  • ✅ Enable routing
  • 🚫 Disable Firewall Rules

Click Apply

7.0

📡 OSPF Configuration

Go to:

Routing > OSPF

Configure the following sections:

🗺️ Areas

7.1

📋 Prefix Lists

7.2

🔀 Route Maps

7.3

🔌 Interfaces

7.4

🌐 Networks

7.5

⚙️ General Settings

  • Configure as required
  • Set all interfaces as Passive, except the WAN interface

Click Apply

7.6

8. 📊 SNMP Configuration

Go to:

Services > Net-SNMP

  • ⚙️ Configure SNMP settings as required
  • 🌐 Set Listen IP to the WAN interface IP

⚠️ This is not the IP address of the Zabbix server.

Click Save

8.0

✅ Summary

This configuration covers:

  • 🏷️ VLAN segmentation
  • 🔌 Interface assignment and IP configuration
  • 🚪 Gateway and routing setup
  • 🔄 NAT configuration
  • 🧭 OSPF routing using FRR
  • 📊 SNMP setup for monitoring (Zabbix)