NOTE: WHEN WRITING THIS GUIDE, IT WAS BASED ON OPNSENSE v24.7.6
First download the required image file from the OPNSense file and follow those steps to install in on your device.
Those steps are followed when the ISP router is configured with no Usename/Password, mainly becuase those are being configured at the ISP end rather that at your end, i.e. Superloop NBN in Australia
Open OPNSense main UI page by navigating to 192.168.1.1, then from there navigate to Interfaces-->[WAN]. In the screen, fill in as following:
Basic Configuration
- Make sure the interface is enabled
- Description : WAN
Generic configuration
- Enable both the Block private networks and Block bogon networks
- IPv4 Configuration Type : choose DHCP
- IPv6 Configuration Type : choose DHCP6
- MTU : 1500
- MSS : 1492
Leave everything as it is no changes
When done click on Save
On the same page, head to Interfaces-->Assignments and select the following:
- WAN : select the desired WAN network adapter port (inbound)
- LAN : sleect the LAN network adapter port (outbound)
When done click on Save
Those steps are followed when the ISP router is configured to have PPPoE settings with Username/Password, i.e. iiNET NBN in Australia
Open OPNSense main UI page by navigating to 192.168.1.1, then from there navigate to Interfaces-->Other Types-->VLAN. On that page, click on the orange + button on the right side to add a new one
In the screen, fill in as follows:
- Device : vlan0.1
- Parent : choose the ethernet port adapter where the NBN will be connected to (inbound WAN)
- VLAN Tag: set it to 2
- VLAN Priority: set it to Best Effort (0, default)
- Description: anything that tells what this VLAN will be used for. I prefer setting it to the ISP name
When done click on Save
Navigate to Interfaces-->Point-to-Point-->Devices. On that page, click on the orange + button on the right side to add a new one and fill in as following:
PPPs configuration
- Link Type : PPPoE
- Link interface(s): select the previously created VLAN, i.e. vlan0.1
- Description : anything that tells what this P2P will be used for. I prefer setting it to the ISP name
- Username: your ISP username here
- Password: your ISP password here and confirm it in the next textbox
- Leave everything else empty/disabled
When done click on Save
Navigate to Interfaces-->[WAN] and fill in as following: Basic configuration
- Make sure the interface is enabled
- Description : WAN
Generic configuration
- Enable both Block private networks and Block bogone networks
- IPv4 Configuration Type : PPPoE
- IPv6 Configuration Type : None
- MTU : 1500
- MSS : 1492
PPPoE configuration
- You will notice that the Modem Port is set to the previously created VLAN, i.e. vlan0.1
- Username: your ISP username here
- Password: your ISP password here and confirm it in the next textbox
- Leave eveything else empty/disabled
When done click on Save
On the same page, head to Interface-->Assignments and select the following:
- LAN : sleect the outbond (LAN) network adapter port
- WAN : select the previously created PPPoE interface that has both the vlan0.1 and the ISP user next to it
When done click on Save
Navigate to Interfaces-->[LAN] and fill in as following: Generic configuration
- Make sure the interface is enabled
- Description : LAN
- IPv4 Configuration Type : Static IPv4
- IPv6 Configuration Type : Track Interface
- Leave MAC Address, MTU and MSS blank
- Speed and Duplex: Default (no preference, typically autoselect)
Static IPv4 Configuration
- IPv4 Address : 192.168.1.1 and select 24
- IPv4 gateway rules : Disabled
Track IPv6 Interface
- Keep IPv6 Interface as Nothing selected
- IPv6 Prefix ID : leave it empty
When done click on Save
This document guide is licensed under the CC0 1.0 Universal license. The terms of the license are detailed in LICENSE