Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Testing the HA configuration

Now that we have both OPNsense firewalls up and running and configured with high availability, let's do some testing!

First, check if the virtual IPs are working accordingly on both OPNsense firewalls, as shown in the following screenshot:

Figure 17.9 – OPNsense-1 (master) running the CARP virtual IP

Figure 17.9 – OPNsense-1 (master) running the CARP virtual IP

On both firewalls, you can check the virtual IP's status in the webGUI. Go to Interfaces | Virtual IPs | Status:

Figure 17.10 – OPNsense-2 (backup) running the CARP virtual IP

Figure 17.10 – OPNsense-2 (backup) running the CARP virtual IP

If you want to use a DHCP server on the LAN interface, you will need to make some configuration adjustments, as follows:

  • Go to Services | DHCPv4 | LAN and set the following settings on the master node:
    • Set both the DNS servers and Gateway fields to the CARP LAN virtual IP; that is, 192.168.0.1.

Remember that every time you change the configuration on the master node, you must sync to...