Комментарии •

  • @Nyrix1
    @Nyrix1 7 месяцев назад +2

    Thank you for this guide! I now have it working on my miniPC with 2 ethernet ports using your tutorial. Now I need to check some tutorials how to properly set up firewall settings :)

    • @sheridans
      @sheridans 7 месяцев назад

      Glad you have it working 💪

  • @prosperstudios
    @prosperstudios Месяц назад +1

    Thank you Sheridan Computing. There is gold in this tutorial. 🎉

    • @prosperstudios
      @prosperstudios Месяц назад

      FYI, for those of you who are building a firewall appliance, with a Proxmox hypervisor, be careful if you choose a mini pc from Ali-Express.
      I found my came loaded with OPNsense, with UEFI malware for a backdoor to the Ethernet driver. This was a normal machine working well. Except it was being C2ed from China.
      I approached the assembler about this and they sent me another installer of their Ethernet drivers with their back door and controlled malware drivers.
      Be aware of the provenance of your firewall device and mini pcs!!

    • @sheridans
      @sheridans Месяц назад

      You're very welcome! Thank you for taking the time to leave feedback

  • @BillZUpZBdZ
    @BillZUpZBdZ 7 месяцев назад +1

    Thanks!!

    • @sheridans
      @sheridans 7 месяцев назад

      And yourself for saying so 👍

  • @Sc4rEye
    @Sc4rEye 7 месяцев назад +6

    Great tutorial, the only thing I would add is if you are going to run this in a production environment, you may want to go into options for the opnsense VM and change "Start at boot" to Yes.

    • @sheridans
      @sheridans 7 месяцев назад +1

      Quite correct, I forgot to mention this 👍

    • @JoaquinVacas
      @JoaquinVacas 7 месяцев назад

      Also, disabling the USB tablet as pointer under "Options", it makes CPU relax a while.
      Also, not related to but... do you notice degraded performance under OPNSense using VirtIO?
      Get tired of that and finally opted for doing PCI Passthrough as I have one of those mini PCs with 4 NICs, performance improved A LOT and iperf3 shows no lost packages anymore, which was the main issue for me.

    • @JoaquinVacas
      @JoaquinVacas 7 месяцев назад

      Disabling the USB tablet as pointer under "Options", it makes CPU relax too and it's not needed for the OS.
      Also, not related to but... do you notice degraded performance under OPNSense using VirtIO?
      Get tired of that and finally opted for doing PCI Passthrough as I have one of those mini PCs with 4 NICs, performance improved A LOT and iperf3 shows no lost packages anymore, which was the main issue for me.

  • @KymHammond
    @KymHammond Месяц назад +2

    Great tutorial! I am at 13:40. How in the world did you managed to put an asterisk in that box?

  • @SilinEgor
    @SilinEgor 5 месяцев назад +1

    Thank you!

    • @sheridans
      @sheridans 5 месяцев назад

      Welcome, thanks for commenting. I did a live stream on these yesterday 😀

  • @muxhax2
    @muxhax2 7 месяцев назад

    thank you very much! Greatly helped, especially with that qemu-agent remark. Hope, you're doing well, sir!

    • @sheridans
      @sheridans 7 месяцев назад

      Glad it helped, brings purpose and encouragement for the videos, much appreciated 🙏

  • @Apollopayne25
    @Apollopayne25 2 месяца назад

    Hi thank you for your video. I’ve tried to do this. Got to web ui of opnsense. But my wan isn’t getting a ip from my modem. I currently run bare metal opnsense. But want to virtualise to get benefits of snapshots. Just can’t figure what I’ve done wrong

  • @mattax87
    @mattax87 5 месяцев назад +1

    look like solution for me :) TY

    • @sheridans
      @sheridans 5 месяцев назад

      Hope it helps

  • @techtodaylab
    @techtodaylab 6 месяцев назад +2

    Hi Sam, why not do a PCI passthrough of the NICs instead of creating the bridges (vmbr). What's the benefit? Also Why did you set the multiqueue? Why the value of 8? Cheers

    • @sheridans
      @sheridans 6 месяцев назад +3

      You certainly can do PCI pass through and recommend it for the wan if you can. Comes down to your use case, I wasn't in a position to pass through the nic due to my physical network setup (i believe i mentioned).
      Increasing the multiqueue for freebsd enables multi core cpu network packets, 8 is maximum iirc.
      It's usually recommended to set the Multiqueue to same number of cpu cores, but no more than 8. I usually set to 8 all time, it has been said that it can cause high cpu on vm if you set it higher than nunber of cpu cores, i haven't seen this being an issue

  • @wilsonherazo
    @wilsonherazo 7 месяцев назад

    I would like to know what the diagram of this tutorial is so I can understand.

  • @kahqt3935
    @kahqt3935 7 месяцев назад +3

    thanks for your tutorial, however wouldnt it be better to set the cpu type to HOST instead of x86x64-v2-AES? otherwise my opnsense vm is running perfectly, and i am able to get my full 2.5gb line speed.

    • @sheridans
      @sheridans 7 месяцев назад +6

      Yes, use the host setting to get full features, my bad.

  • @auslander1026
    @auslander1026 4 месяца назад +2

    i have proxmox machine with only one network port which is connected to asus AP. would appreciate advice on connection for opensense vm for that. should i create an additional vlan for opensense only? thank you!

    • @sheridans
      @sheridans 4 месяца назад +2

      You could create a vlan yes and assign a linux bridge to it

  • @BACKSPIN9ball
    @BACKSPIN9ball Месяц назад

    I want to set this up virtualized so I can learn before moving onto a bare Metal install. would this setup be the one you recommend that wouldn't affect my main network in other words only isolated to vms that connect to the Open sense WAN and nothing else?

    • @sheridans
      @sheridans Месяц назад

      This is similar to how I do, using a different IP range and then blocking anything from that IP range to main network (blocking on main network switch)

  • @kayodeolaoye4124
    @kayodeolaoye4124 3 месяца назад

    Thanks for the tutorial, my lab ip4 didn’t open on the browser after installation, please what can I do?

    • @sheridans
      @sheridans 3 месяца назад

      that's kind of hard to diagnose from youtube comments, can you ping the ip?

    • @kayodeolaoye4124
      @kayodeolaoye4124 3 месяца назад

      Thanks for your response I can ping it inside opnsense but didn’t open webgui on browser

  • @murphyslawdoesnotalwaysapply
    @murphyslawdoesnotalwaysapply 5 месяцев назад

    you lost me at 8:25. good video overall. What where you doing with the 3rd port and why did you remove another we just made?

    • @sheridans
      @sheridans 5 месяцев назад

      Hi, just watched it back and started waffling a bit; sorry about that. I added the additional interface trying to explain that in most cases you'd want to pass an interface directly through to opnSense for you WAN. I was unable as my lan and wan were on the same switch port (vlan) due to the configuration of my network.

  • @noormohammedshikalgar
    @noormohammedshikalgar 3 месяца назад +1

    Hello Sir, I am struggling to get this setup you shown in the video running on my local,
    I followed same everything from scratch
    My WAN has a DHCP
    And i configured LAN same
    Dns also
    Still my machine cant reach internet
    I can ping my other devices connected to LAN but i cannot ping anything on other interfave WAN one
    What will be the issue here
    I am not getting it
    Please do help

    • @sheridans
      @sheridans 3 месяца назад

      Can you ping internet by IP to rule out dns?

    • @noormohammedshikalgar
      @noormohammedshikalgar 3 месяца назад

      @@sheridans No nothing was working, so i tried pfsense so i installed it
      And boom it worked without anything to do
      Out of the box it worked. So for now i am sticking to pfsense
      Will learn how things work in firewall
      And then will switch to OPNsense and fix the issue
      Thanks a lot for the reply

  • @orion4502
    @orion4502 5 месяцев назад

    Once I am done with setting all this up do i just unplug my old router and plug the wan into the configured wan port in OPNsense?

    • @sheridans
      @sheridans 5 месяцев назад

      I don't know what your current setup is or how your current router connects to the internet

    • @orion4502
      @orion4502 5 месяцев назад

      ​​@@sheridanscurrently I have an Asus router but I would like to see if I could replace it with a proxmox setup and have OPNsense running on a virtual machine. Currently I have IP passthrough enabled from my modem to go to the router with DHCP enabled. How would I go about replacing the router altogether and just use the OPNsense on Proxmox?

    • @sheridans
      @sheridans 5 месяцев назад

      @@orion4502Depends on your internet connection and whether you'd need a modem attached.

  • @kayodeolaoye4124
    @kayodeolaoye4124 3 месяца назад

    I can ping the ip inside opnsense with ping host but it doesn’t open on browser

    • @sheridans
      @sheridans 3 месяца назад

      You could try resetting the gui via console

  • @kwazie_harry
    @kwazie_harry 5 месяцев назад

    I only have one interface, how do i go about it? i'm stuck. i can't access the interface.

    • @sheridans
      @sheridans 5 месяцев назад

      Your device only has 1 physical interface? Ideally you need more for a firewall

    • @kwazie_harry
      @kwazie_harry 5 месяцев назад +1

      @@sheridans thanks for this. Found one of my old Dell DA-300 hubs that happens to have a network port. So I just basically plugged it there to get a second interface.

  • @iochisono97
    @iochisono97 5 месяцев назад

    i've followed your steps but somehow opnsense has no access to the internet, i don't know why my isp router is blocking it since it's connected to a lan port and should be just another device for it to route traffic to

    • @sheridans
      @sheridans 5 месяцев назад

      Usually, you'd set your ISP router in bridge mode; though it should work either way. Is the opnsense picking up a dhcp address from your isp router? can you ping the router from opnsense?

    • @iochisono97
      @iochisono97 5 месяцев назад

      @@sheridans the isp router has no bridge mode; opnsense gets an IP and i can see the device from the isp gui but opnsense can only reach the isp router.
      i was able to setup an AP with no effort, i can't understand why opnsense is not being routed

    • @sheridans
      @sheridans 5 месяцев назад +1

      So you can ping the ISP routers local address?

    • @iochisono97
      @iochisono97 5 месяцев назад

      @@sheridans yes

  • @Mystik3Al
    @Mystik3Al 4 месяца назад

    what is the default password for opnsense installer?
    one is not defined when VM is created.

    • @sheridans
      @sheridans 4 месяца назад +1

      To install: installer with pass opnsense, normal login, root with pass opnsense

    • @Mystik3Al
      @Mystik3Al 4 месяца назад +1

      @@sheridans cheers.

  • @vonderlust
    @vonderlust 3 месяца назад

    Lots of glossing over settings makes this unusable. Such as the queue settings on WAN

    • @sheridans
      @sheridans 3 месяца назад

      Multiqueue is related to multiple cpu threads handling packets. It's a recommended setting to pass them through to FreeBSD. Not sure what about this is unusable?