OPNsense
Contents
- 1 installation
- 2 aim
- 3 setup
installation
prerequisite
- serial-cable / female<>female (null-modem)
- https://de.wikipedia.org/wiki/RS-232#Verkabelung_und_Stecker
- RX-TX (Pin2/Pin3) crossed
- GND <> GND
- putty
- speed 115200
- installer:opnsense
aim
Internet Internet : : DSL-Provider:(2.5Mbit/s) LTE-Provider:(100GB/month) : : : : .---+----. .----+-----. |fritzBox| NAT-Routers | SpeedBox | '---+----' '----+-----' | | 192.168.178.1/24 192.168.0.1/24 | | DHCP DHCP | | | .----------. | +-WAN--| OPNsense |--LTE--+ '----+-----' | LAN 192.168.1.1/24 | DHCP | | ...-----+-----... (Clients/Servers)
- DSL speed is very low, switch to LTE
- LTE data-volume is limited, failover to DSL
- cache windows updates to save bandwidth and download-volume
setup
- Versions: OPNsense 21.1.1-amd64
- CPU type: AMD GX-412TC SOC (4 cores)
Interfaces: [LAN]
- Device: igb0
- IPv4 Configuration Type: static IPv4
- IPv6 Configuration Type: None
Interfaces: [WIFI]
- Device: ath0_wlan1
Interfaces: [WAN]
- Device: igb1
- IPv4 Configuration Type: DHCP
- IPv6 Configuration Type: None
Interfaces: [LTE]
- Device: igb2
- IPv4 Configuration Type: DHCP
- IPv6 Configuration Type: None
System: Gateways: Single
WAN_GW
- Interface: WAN
- Address Family: IPv4
- IP address: dynamic
- Disable Gateway Monitoring: unchecked
- Monitor IP: 8.8.8.8
LTE_GW
- Interface: LTE
- Address Family: IPv4
- IP address: dynamic
- Disable Gateway Monitoring: unchecked
- Monitor IP: 1.1.1.1
System: Gateways: Group
WAN_LTE_GW_GROUP
- Gateway Priority: LTE_GW: Tier1
- Gateway Priority: WAN_GW: Tier2
- Trigger Level: Pcket Loss
- Description: failover group
System: Settings: Administration
- (Secure Shell)
System: Settings: General
- DNS servers: 8.8.8.8 WAN_GW
- DNS servers: 1.1.1.1 LTE_GW
- Gateway switching: Allow default gateway switching
Firewall: Aliases
- RFC1918
- Content: 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8
- Description: private networks
Firewall: NAT: Port Forward
Anti-Lockout rule
system default
redirect traffic to proxy
LAN1 TCP LAN1 net * ! RFC1918 80 (HTTP) 127.0.0.1 3128
(make transparent Web-Proxy work)
Firewall: NAT: Outbound
- Mode: Automatic outbound NAT rule generation
Auto created rule for ISAKMP
WAN LAN1 networks, Loopback networks, 127.0.0.0/8 * * 500 WAN * YES LTE LAN1 networks, Loopback networks, 127.0.0.0/8 * * 500 LTE * YES
Auto created rule
WAN LAN1 networks, Loopback networks, 127.0.0.0/8 * * * WAN * NO LTE LAN1 networks, Loopback networks, 127.0.0.0/8 * * * LTE * NO