Auto-update blog content from Obsidian: 2026-04-29 20:40:29
Some checks failed
Blog Deployment / Notify (push) Successful in 3s
Blog Deployment / Check-Rebuild (push) Successful in 6s
Blog Deployment / Build (push) Has been skipped
Blog Deployment / Deploy-Staging (push) Successful in 9s
Blog Deployment / Test-Staging (push) Failing after 3s
Blog Deployment / Merge (push) Has been skipped
Blog Deployment / Test-Production (push) Has been skipped
Blog Deployment / Clean (push) Has been skipped
Blog Deployment / Deploy-Production (push) Has been skipped
Some checks failed
Blog Deployment / Notify (push) Successful in 3s
Blog Deployment / Check-Rebuild (push) Successful in 6s
Blog Deployment / Build (push) Has been skipped
Blog Deployment / Deploy-Staging (push) Successful in 9s
Blog Deployment / Test-Staging (push) Failing after 3s
Blog Deployment / Merge (push) Has been skipped
Blog Deployment / Test-Production (push) Has been skipped
Blog Deployment / Clean (push) Has been skipped
Blog Deployment / Deploy-Production (push) Has been skipped
This commit is contained in:
@@ -70,11 +70,11 @@ To host an OPNsense VM properly, TrueNAS must be able to present the right netwo
|
||||
|
||||
In TrueNAS, I went to `System` > `Network` and created VLAN interfaces (example with VLAN 13):
|
||||
|
||||

|
||||

|
||||
|
||||
TrueNAS is nice here: changes aren’t applied blindly. You can **test** them and you get a rollback window, which is exactly what you want when you’re touching the network config remotely:
|
||||
|
||||

|
||||

|
||||
|
||||
### Management bridge
|
||||
|
||||
@@ -85,21 +85,21 @@ I created a bridge `br1` for the management interface, shared between:
|
||||
|
||||
And moved the IP configuration to the bridge:
|
||||
|
||||

|
||||

|
||||
|
||||
Final view before apply:
|
||||
|
||||

|
||||

|
||||
|
||||
### Static IP vs DHCP (and why I stayed static)
|
||||
|
||||
I initially tried switching the management bridge to DHCP by updating the MAC address in OPNsense (Dnsmasq override):
|
||||
|
||||

|
||||

|
||||
|
||||
Then I attempted to flip TrueNAS from static to DHCP:
|
||||
|
||||

|
||||

|
||||
|
||||
But DHCP didn’t behave as I expected: it kept receiving random IPs from the pool. I suspected existing leases played a role. I even tried manually editing leases and restarting the service, but after another change, it still ended up with a random address again.
|
||||
|
||||
@@ -111,7 +111,7 @@ This became important later: I originally planned to attach VLAN interfaces dire
|
||||
|
||||
So I created **one bridge per VLAN** (ex: `br13` with `vlan13` as the only member), and used those bridges for the VM NICs:
|
||||
|
||||

|
||||

|
||||
|
||||
That ended up being the difference between “split-brain chaos” and “stable HA”.
|
||||
|
||||
@@ -178,7 +178,7 @@ Now the fun part: recreating the VM on TrueNAS with the same “spirit” as the
|
||||
|
||||
From `Virtual Machines`:
|
||||
|
||||

|
||||

|
||||
|
||||
### VM settings I used
|
||||
|
||||
@@ -215,23 +215,23 @@ I created a new VM with:
|
||||
|
||||
Summary screen:
|
||||
|
||||

|
||||

|
||||
|
||||
After saving, TrueNAS converted the imported image into a Zvol:
|
||||
|
||||

|
||||

|
||||
|
||||
### Adding the additional NICs
|
||||
|
||||
After the VM was created, I added the additional NICs in the VM device list:
|
||||
|
||||

|
||||

|
||||
|
||||
At first, I attached VLAN interfaces directly and started the VM… and instantly broke my network (great success).
|
||||
|
||||
The VM itself booted fine though, and seeing OPNsense come up cleanly on TrueNAS was a good sign:
|
||||
|
||||

|
||||

|
||||
|
||||
But HA-wise, it was a mess: split-brain symptoms, with the TrueNAS-hosted node thinking it was MASTER on almost everything except Mgmt.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user