Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Tech Support Help needed with OPNsense and Maxis Fibre

views
     
TSArmedandDangerous
post Apr 15 2024, 11:30 PM, updated 2y ago

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


Recently got a mini PC to set up my own router but configuring OPNsense successfully has been proving difficult. I've tried various guides here and on other sites which are mostly for TM Unifi but replacing it with Maxis VLANs but nothing seems to work. I have a 4 port device, ETH0 is dedicated to Proxmox running underneath, ETH1, ETH2 and ETH3 are added to OPNsense. ETH1 I'm trying to set as the port to my AP (an existing Asus router, before upgrading to Ubiquiti), ETH2 as LAN to my dumb switch, and ETH3 as WAN. No matter what I try OPNsense never seems to get connected to the internet. I'd pay for someone to guide me through successfully, or to have a video call where you Parsec in or guide me with share screen. Add me on Discord if you want to chat about it, Samfishersam.

This post has been edited by ArmedandDangerous: Apr 15 2024, 11:33 PM
PRSXFENG
post Apr 16 2024, 07:52 AM

Look at all my stars!!
*******
Senior Member
2,613 posts

Joined: Nov 2020


Firstly, you should figure out what infrastructure are you running on as they use different VLANs

For
Maxis on Unifi - 621
Maxis own infra - 11

there are also a few rarer configs like Maxis on Allo and Maxis on Celcom Timur Sabah

you can check with the provided router and see which vlan was used for internet

the PPPoE credentials should be like
A123456@home.maxis.com.my
or @public.maxis.com.my if using public IP

the password should be like A1234561, note the extra 1 at the back compared to the username, however, sometimes, the 1 is not present depending on how they setup your account
TSArmedandDangerous
post Apr 16 2024, 10:13 AM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(PRSXFENG @ Apr 16 2024, 07:52 AM)
Firstly, you should figure out what infrastructure are you running on as they use different VLANs

For
Maxis on Unifi - 621
Maxis own infra - 11

there are also a few rarer configs like Maxis on Allo and Maxis on Celcom Timur Sabah

you can check with the provided router and see which vlan was used for internet

the PPPoE credentials should be like
A123456@home.maxis.com.my
or @public.maxis.com.my if using public IP

the password should be like A1234561, note the extra 1 at the back compared to the username, however, sometimes, the 1 is not present depending on how they setup your account
*
AFAIK I am on TM infra as the TM guys always have to be present if anything breaks that is outside the house. I do have my PPPOE username and passwords as I do have to use them on my existing Asus router. I've tried following guides for TM Unifi but replacing it with Maxis VLANs and it doesn't seem to work.

This post has been edited by ArmedandDangerous: Apr 16 2024, 10:21 AM
trix
post Apr 16 2024, 08:21 PM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



Have you tried without proxmox? How do you assign the NICs to the opnsense VM?
TSArmedandDangerous
post Apr 23 2024, 11:02 AM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 16 2024, 08:21 PM)
Have you tried without proxmox? How do you assign the NICs to the opnsense VM?
*
I've created virtual NICs for the VM as I assume it'll be easier to migrate it to a different host in the future vs a NIC passthrough. I am able to SSH into the VM so I'm not sure if it's a NIC issue or not. Any help is appreciated. I run it in a VM as I plan to also use Ubiquiti AP's in the future and would like to run the Ubiquiti Network in a VM on the same machine, keep all the network stuff on one machine seems like it'll be easier as they will always be on.

user posted image
yenchenje
post Apr 23 2024, 11:56 AM

Enthusiast
*****
Junior Member
932 posts

Joined: Dec 2019
QUOTE(ArmedandDangerous @ Apr 23 2024, 11:02 AM)
I've created virtual NICs for the VM as I assume it'll be easier to migrate it to a different host in the future vs a NIC passthrough.  I am able to SSH into the VM so I'm not sure if it's a NIC issue or not.  Any help is appreciated.  I run it in a VM as I plan to also use Ubiquiti AP's in the future and would like to run the Ubiquiti Network in a VM on the same machine, keep all the network stuff on one machine seems like it'll  be easier as they will always be on.

user posted image
*
It’s best to not create virtual NICs for OPNSense, always pass through physical NICs on your device to OPNSense VM

Try that, I’ve always tried to pass through physical NICs in Proxmox and avoided throwing my stuff on bridge whenever possible and never had much issues if not at all, but I am using a full ATX build with Intel gigabit NICs
TSArmedandDangerous
post Apr 23 2024, 01:22 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(yenchenje @ Apr 23 2024, 11:56 AM)
It’s best to not create virtual NICs for OPNSense, always pass through physical NICs on your device to OPNSense VM

Try that, I’ve always tried to pass through physical NICs in Proxmox and avoided throwing my stuff on bridge whenever possible and never had much issues if not at all, but I am using a full ATX build with Intel gigabit NICs
*
For whatever reason IOMMU shows all my NICs are in the same group even though Intel VT-D is already enabled in BIOS. My real issue is that I don't know if I'm configuring the VLANs and PPPOE correctly, and bridge shouldn't cause any issues except maybe some performance loss if any. Could you guide me through the setup process for Maxis? I've done what I could with my limited knowledge. I would like to stay with bridged NICs as hardware may change later on which makes migrating more complicated than necessary.



user posted image

This post has been edited by ArmedandDangerous: Apr 23 2024, 04:31 PM
trix
post Apr 23 2024, 04:49 PM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



where and how are you configuring the vlan
TSArmedandDangerous
post Apr 23 2024, 05:08 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 23 2024, 04:49 PM)
where and how are you configuring the vlan
*
Through the web UI. I basically did this but replaced it with Maxis VLAN instead. I stopped after PPPOE configuration as the connection to Maxis was not established anyway so did not proceed further down the guide.

https://dev.to/froxity/setup-pfsense-with-t...alaysia-isp-ddj

This post has been edited by ArmedandDangerous: Apr 23 2024, 05:09 PM
trix
post Apr 23 2024, 07:05 PM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



in proxmox configure the bridge you are using for WAN NIC as vlan aware
TSArmedandDangerous
post Apr 23 2024, 08:56 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 23 2024, 07:05 PM)
in proxmox configure the bridge you are using for WAN NIC as vlan aware
*
They are already set as VLAN aware in proxmox.
trix
post Apr 24 2024, 01:45 PM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



and what vlan are you assigning to the opnsense vm, 4095?
TSArmedandDangerous
post Apr 24 2024, 03:20 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 24 2024, 01:45 PM)
and what vlan are you assigning to the opnsense vm, 4095?
*
VLAN 621 is what I read is Maxis VLAN using TM infra. I'm not sure what VLAN 4905 is tho!
trix
post Apr 24 2024, 03:59 PM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



QUOTE(ArmedandDangerous @ Apr 24 2024, 03:20 PM)
VLAN 621 is what I read is Maxis VLAN using TM infra.  I'm not sure what VLAN 4905 is tho!
*
if you set vlan 621 on VM level, then in opnsense VM you don't need to configure vlan anymore
if you set vlan 4095 on VM level, then the VLANs will be passthrough and you will need to configure vlan in opnsense
TSArmedandDangerous
post Apr 26 2024, 03:07 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 24 2024, 03:59 PM)
if you set vlan 621 on VM level, then in opnsense VM you don't need to configure vlan anymore
if you set vlan 4095 on VM level, then the VLANs will be passthrough and you will need to configure vlan in opnsense
*
Would it be better to set VLAN in opnsense itself since I need to configure for VOIP as well? I would like to use the VOIP service as sort of a "house phone".
trix
post Apr 27 2024, 09:06 AM

Enthusiast
*****
Senior Member
848 posts

Joined: Feb 2005
From: everywhere, yet nowhere.



that depends on where and how are you going to configure the VOIP
if the connection is going through opnsense, then yeah you need to go with the configure VLAN in opnsense method
if you are going to configure it somewhere before opnsense, then it doesn't matter which method you choose
TSArmedandDangerous
post Apr 27 2024, 12:09 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(trix @ Apr 27 2024, 09:06 AM)
that depends on where and how are you going to configure the VOIP
if the connection is going through opnsense, then yeah you need to go with the configure VLAN in opnsense method
if you are going to configure it somewhere before opnsense, then it doesn't matter which method you choose
*
I would like as few devices running as possible to save on power and heat. My current setup is an Asus RT-AX86U router, which has a built in VOIP setting that passthroughs the VOIP connection to the default Maxis router. So it's NPU -> AX86U -> Maxis Router -> VOIP Phone. I would like to cut out the Maxis router if possible, and I will temporarily be using the AX86U in AP mode if I can ever get OPNSense to work. I think setting VLANs in OPNSense is the most practical for my use case?
PRSXFENG
post Apr 27 2024, 05:43 PM

Look at all my stars!!
*******
Senior Member
2,613 posts

Joined: Nov 2020


QUOTE(ArmedandDangerous @ Apr 27 2024, 12:09 PM)
I would like as few devices running as possible to save on power and heat.  My current setup is an Asus RT-AX86U router, which has a built in VOIP setting that passthroughs the VOIP connection to the default Maxis router.  So it's NPU -> AX86U -> Maxis Router -> VOIP Phone. I would like to cut out the Maxis router if possible, and I will temporarily be using the AX86U in AP mode if I can ever get OPNSense to work.  I think setting VLANs in OPNSense is the most practical for my use case?
*
you could cut out the maxis router if you have an ethernet voip phone that can change its user agent to pretend to be the maxis router

or, use a software based voip phone
TSArmedandDangerous
post Apr 27 2024, 07:12 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


QUOTE(PRSXFENG @ Apr 27 2024, 05:43 PM)
you could cut out the maxis router if you have an ethernet voip phone that can change its user agent to pretend to be the maxis router

or, use a software based voip phone
*
If that's the case for the sake of simplicity I'll keep the Maxis Router in the loop. Still having lots of problems with resolving PPPOE so I can't get online with OPNSense ):
TSArmedandDangerous
post May 4 2024, 08:34 PM

Less QQ, more Pew Pew
*****
Senior Member
933 posts

Joined: Feb 2008
From: Kuala Lumpur


With some help and guidance from trix connecting to Maxis now works! Now to get VoiP working! I have decided to keep the Maxis router in the loop as that seems to be way easier to configure without having to setup user agents etc etc.


Do I just need to add a VLAN to my LAN interface, connect my Maxis router to a free port on the switch, then connect the phone to the Maxis router? That was my setup when using the Asus Router before moving to OPNSense. ONU-> Asus Router -> Maxis Router -> DECT Phone. The Asus router had VOIP settings easily configured, just had to select from a list of ISPs and connect the Maxis router to the correct NIC and it worked.

Anyone know how to do it from OPNSense?

This post has been edited by ArmedandDangerous: May 4 2024, 08:35 PM

2 Pages  1 2 >Top
 

Change to:
| Lo-Fi Version
0.0264sec    0.86    5 queries    GZIP Disabled
Time is now: 19th December 2025 - 06:35 PM