the pfense club

[mllrkllr88]

Hey Guys! I've used consumer-grade routers for the last 20 years and I'm just now diving into this madness 

 

I decided to go with OPNsense. It looks like they provide many more updates than pfSense. I built my first router but haven't given it internet yet. I'm going to put my Comcast modem/router combo in bridge mode and run this bad boy as the DHCP host. 

 

Any tips or advice?

 

[ENTERPRISE]

2 hours ago, mllrkllr88 said:

Hey Guys! I've used consumer-grade routers for the last 20 years and I'm just now diving into this madness 

 

I decided to go with OPNsense. It looks like they provide many more updates than pfSense. I built my first router but haven't given it internet yet. I'm going to put my Comcast modem/router combo in bridge mode and run this bad boy as the DHCP host. 

 

Any tips or advice?

 

Hey bud, what are the system specs ? What is your broadband rated at from the ISP ?

 

Also will you use VPN from the OPNSense box ?

 

Will you be running IDS ? (Internet Security AV etc)

 

These are all the sort of considerations to have when speccing a device for firewall usage ?

[mllrkllr88]

Thanks for getting back to me! 

 

The system is built and OPNsense is installed on a little ITX 9900K. I have an Intel 10g NIC for the device too. I think it's total overkill but hopefully, it should run for ages and not give me any problems. 

 

I am set up with Comcast DSL at my house. It's rated for about 600Mbps down and 120Mbps up. It's not great but it's what I can get in my area and the price is nice at $55 per month. 

 

I don't like the Comcast router/modem even though it's high-performance and free. It's WiFi6 and has never failed once, but it broadcasts the xfinitiywifi signal for all users to piggyback on my network, which is the real reason I want to turn it into a bridge.

 

As for my network requirements, it's pretty simple. I don't need a VPN or anything like that. However, my work laptop is quite aggressive and talks to everything on my network. I was thinking about setting up a VLAN so my work laptop is completely isolated from my home network. I guess I would need to buy a managed switch for that?? Right now I setup a guest account on my WiFi and I connect my laptop to that. I think it's fairly well isolated but that laptop has fangs 

 

[ENTERPRISE]

4 hours ago, mllrkllr88 said:

Thanks for getting back to me! 

 

The system is built and OPNsense is installed on a little ITX 9900K. I have an Intel 10g NIC for the device too. I think it's total overkill but hopefully, it should run for ages and not give me any problems. 

 

I am set up with Comcast DSL at my house. It's rated for about 600Mbps down and 120Mbps up. It's not great but it's what I can get in my area and the price is nice at $55 per month. 

 

I don't like the Comcast router/modem even though it's high-performance and free. It's WiFi6 and has never failed once, but it broadcasts the xfinitiywifi signal for all users to piggyback on my network, which is the real reason I want to turn it into a bridge.

 

As for my network requirements, it's pretty simple. I don't need a VPN or anything like that. However, my work laptop is quite aggressive and talks to everything on my network. I was thinking about setting up a VLAN so my work laptop is completely isolated from my home network. I guess I would need to buy a managed switch for that?? Right now I setup a guest account on my WiFi and I connect my laptop to that. I think it's fairly well isolated but that laptop has fangs 

 

 

Hey bud,

 

That system will be more than fine for what you are trying to achieve, and definitely overkill for a simple Firewall/DHCP deployment. You are good

 

You should be able to setup a VLAN on your OPNSense box but if you want to do it on a switch, yes you will need a managed switch for that

[PCSarge]

hey guys, i set up an opnsense box recently, specs as follows:

 

HP Elitedesk SFF (work freebie)

i5 [email protected]

8GB 2666mhz ram 

256GB generic NVME M.2 SSD

intel 10g SFP+ NIC

intel 10G RJ45 NIC (soon to be another SFP with direct fiber line if all goes well)

[ENTERPRISE]

On 08/01/2024 at 22:35, PCSarge said:

hey guys, i set up an opnsense box recently, specs as follows:

 

HP Elitedesk SFF (work freebie)

i5 [email protected]

8GB 2666mhz ram 

256GB generic NVME M.2 SSD

intel 10g SFP+ NIC

intel 10G RJ45 NIC (soon to be another SFP with direct fiber line if all goes well)

Nice, that box will see you through nicely:) 

[maddangerous]

Edit: failed to read, disregard lol

Edited March 9 by maddangerous