๐ก HomeLab OPNsense Router & Firewall Setup โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab OPNsense Router & Firewall Setup.
Step 0: Preparation
Purchase Hardware
Download Image
- select
amd64โvgaโ downalod
Create Bootable USB Disk
bash
brew install balenaetcher --caskBoot
- BIOS entry:
f2,f7,f11,DEL - In my case
DEL
Step 1: CUI, CLI
Installation
Initial password
bash
# ๋์คํฌ ์ธ์คํจ๋ฌ๋ก ๋ก๊ทธ์ธ
installer / opnsense
# ๋ฃจํธ ์ด๊ธฐ ํจ์ค์๋
root / opnsenseKeyboard Mapping
- Use default. Just enter
File system and options
- If RAM is 8GB or more, select
ZFS, if less than 8GB, selectUFS
RAIDE Option
- Select
stripe as there is only one SSD.
- After selecting the disk
OK
Reset Root Password
- Letโs proceed for security reasons.
- After completion, click reboot, confirm shutdown, and remove the USB disk before turning on. (Reboots from USB in boot order)
Initialize
Assign interface
- enter 1
LAGG, VLAN, WAN, LAN
- LAGG:
N - VLAN:
N - WAN:
igc0 - LAN:
igc1
References and Guidelines (NOTE)
โ LAGG: Technology that combines two or more interfaces and uses them as one interface
โ VLAN: A physically insufficient LAN can be divided virtually and used as if more equipment exists
Step 2: GUI
Configuration wizard
- Hardware required:
- Connect WAN such as telecommunication company modem to WAN port
- Connect your personal laptop to the previously declared LAN port by wire
- Access to https://192.168.1.1/
- Once connected, you will be automatically moved to the Configuration wizard page.
General Information
WAN Setting
- As this is a WAN setting, if assigned by ISP, set to
DHCP, and in special cases where a static IP assignment is required, set toStatic
LAN Setting
- LAN will be set up with DHCP, so just check the band and Next
Finish
- The root password has already been initialized, so just scroll through it and the configuration is complete
Existing equipment running in AP mode
References and Guidelines (NOTE)
OPNSense can provide its own routing function, but since its wireless communication function is not good, it is recommended to use a separate router product in AP mode after installing it on hardware without a Wi-Fi function.
- All freeBSD-based OSs have excellent performance/security, but additional features such as wireless technology are said to be poor.
- High-performance router OSs are generally referred to as Linux-based OS.
Step 3: Features
-
Please refer to the following document for further settings:
-
CLI
Leave a Reply