Are you planning to do a guide about layer 7 addons or filters?

why my cat8k doesn't have "controller-mode enable" command? i do have the same version IOS-XE on your video tho, hmmm

Thanks a lot brother!

@14:35 Is there another way to get the IP address? I get 100% loss

This is amazing. Thank you. Can you make an extension of how to put a Nginx Proxy Manager as well?

Great Video - Worked Perfectly.

Why is your voice so ASMR.

5:30 can see your ip

very helpful, thanks!

very nice demonstration, keep up the good work

Any help you can provide on uploading the C8000v to vmanage? I'm attempting to upload the WAN edge list as a csv file but it keeps failing saying virtual hardware platforms are not supported.

Is it safe to have a floating rule to allow Mullvad traffic IN ?

set all of this up ti discover in the end that if I have my amneziavpn (wireguard client with obfuscation) on, service blocks dont work:) prolly none of the other filtering too? haven't checke danything yet. just discovered:)

This video is amazing. Could you please show a tutorial for split tunneling with Mullvad from the CLI?

Can you refresh the guide please ? I like so much how you explain and I want to add the wireguard on my Opnsense. Thanks a lot.

how did you get the CLI prompt? My cli won't let me type anything. It keeps streaming status messages.

For me it only works if the machine has auto dns, if I put manual dns in the machine for example google or other then the blocks go away, how can I make the opnsense machine dns authoritative thru the whole network

Those who try to do this virtually and/or bridged mode Firewall-->Settings-->Advanced Check the "Disable reply-to" box

This tutorial has helped me out a lot. Thank you!

Nice video guide! Is it possible to pass local traffic from one site to another as well?

I hope by now there is a better configuration window within OPNsense for Adguard. since this is not user friendly at all

If this video ever goes down -- I'm sooo doomed! Thanks for uploading it! :D

opnsense changed all the menus at some point now I'm getting lost any chance you could do a update on this

Hello! Thanks for video. I'm making the same migration, and have the same problems with the name of network adapter. And i have no working solution how to change ens160 to ens18 in all hundrets of thousands VMs without ssh on them after migration. And it's not possible to do it by web-console because of thousands VM's in Proxmox... Don't you have any ideas how to change proxmox naming of network adapter, when it makes new Proxmox's VMs?

Great video, but I think you should explain the dns server setup, not sure it is clear where the dns server(s) live ?

The bot does not respond back even after websocket is opened.

You just saved me so much time messing around with rebuilding VMs. Thank you!

Once i selected my blocked services, I can still access these sites?? Is there a step I need to configure in Opnsense to block them?I followed along with everything that was mentioned in the step-by-step. But still can access the sites. Someone please help.

This is such empowering info. Seeing how to install Yang, along with this simple real world example gives me a better understanding of what Yang/Netconf/Restconf are and why we want to use it. Didn't know about this until I studied for my CCNP. I knew about the Yang suite but didn't really have a clue as to how to actually use it. Thanks again.

Thanks so much. New to kvms, proxmox, or Linux you have helped me get ahead.

What if I have a websocket URL instead of a normal url

Would be great if you can make a guide for wireguard selective routing to Warp+, use wgcf to get config file. The trick to get warp+ is to sub on the phone, grab the lic key -> wgcf register -> change lic - wgcf update -> wgcf generate.

MAC filtering is working for me, but it seems like any device on the list can connect to any SSID that has mac filtering turned on. Even specifying different SSIDs in the device authentication list, or using different attribute lists, doesn't work. It seems broken, that I can't limit specific MACs to specific WLANs.

Networking Nonsense could u please update this guide? this guide is not working after update 24.1.8 PLEASE :(

Thank you!

Great video, thanks a lot. Would there be an possibility to make site 2 connect to resources in site 1 via the hqcorp? Remote clients that would connect to hqcorp could still connect to resources in site1 and site 2 (both allowed IP Subnets set) ?

THANKS SO MUCH, I can see what i did wrong now xD

Just wondering if there is a way to use Adguard together with OPNSense while DNS over TLS in OPNSense?

Please guide me how to join AP with that EWC, for me it is not at all showing with EWC!!!

awesome demonstration, thank you so much, was able to configure myself

4 years later and this video still helps! The official documentation is very inconsistent. The video contains everything you need to set up the controller! Thanks to the author!

Congratulations for this clean explained tutorial, I am struggling for 3 days by now trying to connect my OPNsense DEC700 to my debianVPS with wireguard server deployed by me. Official documentation is a piece of s , many thanks! The only downside is I want to apply VPN over a single host which is working like a charm but only for outgoing 443, so I want the wg tunnel to apply only in browsers. Do you have any idea how can I archive this? Many thanks in advance and thanks again for this amazing tutorial!

Thanks helped alot

Thank you for sharing! Will this work with AMD ryzen processors? I have a minipc that I'm hoping to do exactly this to.

I agree with the rest of the comments. This is hands down the best video and explanation of setting up wireguard on OPNsense FW that I have ever seen. Thank you for taking the time to not only show us how to do the setup, but you explain why we set the things we need to and what the ramifications are. Thank you.

can you make a client on your router use wireguard without installing the wireguard client? that was something you can do on consumer routers that i liked.

You're going to go ahead and go ahead real quick real quick because you went ahead.

Thanks a lot for this clear explanation

Bro. by far the best tutorial on this subject matter ive came across. YOURE EXCEPTIONAL. keep doing this shit my dude!

Still after this guide, my clients are unable to reach the internet via the Wireguard connection. OPNsense 24.1.6-amd64. Another quirk is that new peers can not handshake until you stop/start the Wireguard plugin... And I have succesfully ran Wireguard on my linux server for a number of years.