Install OPNsense® on Shunya N-BOX Mini Servers

1. OPNsense® Overview #

OPNsense® is an open-source, popular, and easy-to-use firewall and routing platform based on HardenedBSD. It is a common choice for implementing an open-source firewall. More information about OPNsense® can be found on the OPNsense website.

2. Install OPNsense® #

2.1 What you will need for installation #

1. Shunya N-BOX mini server
2. USB drive (at least 8GB)
3. HDMI Monitor
4. USB Keyboard
5. Internet connection
6. Laptop/PC

2.2 Steps #

2.2.1. Download & Extract OPNsense® Installer Image #

1. Download the OPNsense® installation image from https://www.opnsense.org/download/. It is crucial to select the correct options when downloading the image:
   • Architecture: AMD64 (64-bit)Image Type: VGA.
   We recommend downloading the latest available version.
2. Now that the compressed image file has been downloaded, you will need to use a program like “7zip” or “WinZip” on Windows to decompress the file. The resulting file should have the same name, except that the file extension will now be “.img” instead of “.img.gz”.

2.2.2. Burn the Installation Image to a USB Drive #

1. The easiest way to burn the installation image to a USB drive is by using software called “balenaEtcher” on Windows, Linux or on Apple macOS.
2. Download and install balenaEtcher from balenaEtcher website.
3. Insert your USB Drive and open balenaEtcher.
4. Click on “Flash from file” and select the OPNsense installer image file.
5. Click on “Select target” and choose your USB drive.
6. Click on “Flash!” This will write the OPNsense installer to the USB drive.

2.2.3. Verify the Boot Priority in BIOS Mode #

1. Power off the device.
2. Connect the monitor.
3. Insert the USB device into a USB port.
4. Plug in a USB keyboard.
5. Power on the device, press the DELETE key, and verify that it boots to the BIOS.
6. Select the “Boot” tab, then “FIXED BOOT ORDER Priorities,” and confirm that “Boot Option #1” is set to “USB Device.” The screenshot may show an example of a SanDisk USB device, the manufacturer’s name may change or may not be displayed.
7. Press “F4” to save and exit the BIOS.
8. Reboot the device i.e (power off and power on)
9. The device should boot into the OPNsense installer.

2.2.4. Install OPNsense® #

1. OPNsense® will boot up and display a login screen.
   
2. Log in using the username installer and the password opnsense, this will lead you to the installation page.
3. While choosing the installation, select “Install (UFS).”
4. The installer will ask you to set the root password, if not set, the default password will be opnsense.

Installation of OPNsense® is complete!

If you face any difficulties in installation, you can follow the steps outlined in the official OPNsense® installation walkthrough.

2.2.5. Configure OPNsense® #

We will do a bare minimum setup of OPNsense® to complete the installation. OPNsense® will automatically assign WAN and LAN interfaces to appropriate Ethernet ports. Advanced users can modify the steps as per their use cases.

1. On first boot OPNsense® will ask you to setup WAN and LAN interfaces.
2. Since it is a bare minimum setup, we will not setup these interfaces rather we will keep them default. For advanced users they can press ENTER to configure interfaces manually
3. 
4. If no key is pressed, it will proceed with automatic configuration, with the 1st Ethernet port as LAN and the 2nd Ethernet port as WAN.
   • igc0 –> LAN
   • igc1 –> WAN

Configuration of OPNsense® is complete!

2.2.6. Accessing OPNsense® WebUI #

1. Connect your laptop/computer to the LAN port of the device.
   • LAN port will either be (A) or (D)/(F)
   • Open your browser and Go to the website https://192.168.1.1
2. Browser will warn you about the unsigned certificates. Click on ‘Advanced’ and Click ‘Proceed to 192.168.1.1 (unsafe)’
3. Login into the WebUI using the username root and password opnsense
4. 
5. Shunya Mini Server can now be configured as per your requirements using the WebUI.

Now, let’s set up OPNsense®. Watch this video (setup starts at 12:27 mins) for simple setup instructions. Once it’s done, you can use OPNsense® for various applications.

For detailed documentation on OPNsense® please visit the official OPNsense® Documentation and if you have any questions regarding OPNsense® please visit the official OPNsense Forum.

_{** OpnSense® is a registered trademark owned by its respective owner(s). Shunya Mini Servers is not affiliated with or endorsed by OpnSense®. The use of the OpnSense® trademark on this website is for descriptive purposes only and does not imply any association with or endorsement by the trademark owner(s).}