From cee866821d643d3ec502182fed6f8a192c9b6cfe Mon Sep 17 00:00:00 2001 From: DoTheEvo Date: Tue, 26 Apr 2022 02:40:18 +0200 Subject: [PATCH] update --- opnsense/readme.md | 84 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 84 insertions(+) create mode 100644 opnsense/readme.md diff --git a/opnsense/readme.md b/opnsense/readme.md new file mode 100644 index 0000000..15f2060 --- /dev/null +++ b/opnsense/readme.md @@ -0,0 +1,84 @@ +# OPNsense + +###### guide-by-example + +![logo](https://i.imgur.com/3ROLmaz.png) + +# Purpose + +Firewall, router, dhcp server, recursive DNS, VPN, traffic monitoring. + +* [Official site](https://opnsense.org/) +* [GitHub](https://github.com/opnsense) +* [Subreddits](https://www.reddit.com/r/opNsenseFirewall+opnsense/) + +Opensource.
+Backend is FreeBSD with its packet filter `pf` and `configd` +for managing daemons, services and templates.
+For web gui frontend it uses lighttpd web server, PHP/Phalcon framework +and custom services built in Python. + +Can be installed on a physical server or in a virtual machine. + +# VMware ESXi + +This setup is running on the free version of ESXi 7.0 U3
+ +#### Network setup + +Two physical network cards - NICs + +* the default `vSwitch0` will be used for LAN side +* create new virtual switch - `vSwitch1-WAN` +* create new port group - `WAN Network`, assign to it `vSwitch1-WAN` + +#### Virtual machine creation + +* Guest OS family - Other +* Guest OS version - FreeBSD 13 or later versions (64-bit) +* CPU - 2 cores +* RAM - 2GB, for basic functionality, later can assign more +* SCSI Controller 0 - LSI Logic SAS +* VM Options > Boot Options > Firmware - EFI + +Afterwards, edit the VM, add network adapter connected to `WAN Network` + +[Download](https://opnsense.org/download/) the latest opnsense - amd64, dvd, +extract iso, upload to ESXi datastore, +mount it in to the VMs dvd, check connect on boot + + +#### OPNsense installation in VM + +Disconnect your current router and plug stuff in to the ESXi host. + +* let it boot up +* login `root/opnsense` +* set interfaces, in ESXi VM overview you can see networks and MAC addresses +* set IPs, wan is usually left alone with dhcp,
+ static ip for LAN and enable dhcp server running and give it range +* afterwards you should be able to access web gui +* log out +* log in as `installer/opnsense` +* click through installation leaving stuff at default except for password +* done + +# First login and basic setup + +* at the LAN ip login +* click through wizzard, use 8.8.8.8 and 1.1.1.1 for DNS +* + + +# Update + + +# Backup and restore + +#### Backup + + + +#### Restore + +