Opnsense Transparent Filtering Bridge

Transparent Filtering Bridge

Netplan

[Bearbeiten]

Interfaces

MGMT

LAN

MGMT

Disable Outbound NAT rule generation

• To disable outbound NAT, go to Firewall ‣ NAT ‣ Outbound and select “Disable Outbound NAT rule generation”.

Change system tuneables

• Enable filtering bridge by changing net.link.bridge.pfil_bridge from default to 1 in System ‣ Settings ‣ System Tuneables.

net.link.bridge.pfil_bridge =1

net.link.bridge.pfil_member = 0

Create the bridge

• Create a bridge of LAN and WAN, go to Interfaces ‣ Other Types ‣ Bridge. Add Select LAN and WAN.

Assign a management IP/Interface

• To be able to configure and manage the filtering bridge (OPNsense) afterwards, we will need to assign a new interface to the bridge and setup an IP address.

• Disable Block private networks & bogon
• For the WAN interface we nee to disable blocking of private networks & bogus IPs.
• Go to Interfaces ‣ [WAN] and unselect Block private networks and Block bogon networks.

Quelle

• https://docs.opnsense.org/manual/how-tos/transparent_bridge.html#transparent-filtering-bridge