Initial setup

Foreword

OPNsense does not currently support the automatic configuration of the network interface, so after ordering an OPNSense instance, the network configuration must be carried out manually via the web console.



Setting up the WAN network interface

First determine the correct configuration of the network interface via the Customer Center. To do this, call up the server and select the Network tab.


The required IP addresses including their gateway can be found in the network overview of your server.


Then call up the Web console of the OPNSense instance for the setup.


Then carry out the following steps:


  1. log in to the web console with the root user, see password vault.
  2. enter an option: 2 (Set interface IP addresses)
  3. configure IPv4 address WAN interface via DHCP? n

    1. enter the new WAN IPv4 address: 1.2.3.4
    2. enter the new WAN IPv4 subnet bit count (1 to 32): 24
    3. for a WAN, enter the new WAN IPv4 upstream gateway address: 5.1.45.1
    4. do you want to use the gateway as the IPv4 name server, too? n
    5. select an IPv4 of a DNS server of your choice here
  4. configure IPv6 address WAN interface via DHCP6? n

    1. enter the new WAN IPv6 address: 2a07:6fc0:0:123::1
    2. enter the new WAN IPv6 subnet bit count (1 to 128): 64
    3. for a WAN, enter the new WAN IPv6 upstream gateway address: 2a07:6fc0::2
    4. do you want to use the gateway as the IPv6 name server, too? n
    5. select an IPv6 of a DNS server of your choice here
  5. do you want to enable the DHCP server on WAN? n
  6. do you want to enable the DHCP6 server on WAN? n
  7. do you want to change the web GUI protocol from HTTPS to HTTP? n
  8. do you want to generate a new self-signed web GUI certificate? y
  9. restore the web GUI access defaults? n


You can then log in to the web interface at https://1.2.3.4 with the access data of the root user.


You will usually receive a certificate warning from your browser, as this is a self-signed certificate. The transmission to the web interface is nevertheless encrypted.