Skip to content

Post-Cutover Verification — 2026-02-21

Date: 2026-02-21 Event: OPNsense gateway cutover Phase 2 completed

Network Topology (Post-Cutover)

ISP Modem (ARRIS TG2482, bridge mode)
  │
  └── nic0 / vmbr0 ── OPNsense WAN (vtnet0) ── Public IP via DHCP
                         │
                       OPNsense LAN (vtnet1) ── 192.168.0.1/24
                         │
              nic1 / vmbr1 ── MokerLink Switch
                    │         │         │
                Docker VM   TP-Link   RPi 5
              192.168.0.10  AP mode  (pending)
                            192.168.0.2

Proxmox mgmt: 192.168.0.237 (on vmbr1)

DHCP Configuration

Setting Value
Server OPNsense ISC DHCPv4
Range 192.168.0.100 – 192.168.0.250
Gateway 192.168.0.1
DNS 192.168.0.10 (Pi-hole)
Domain cronova.local

Mac Sanity Check

Check Result
IP 192.168.0.105 (DHCP)
Gateway 192.168.0.1 (OPNsense)
DNS 192.168.0.10 (Pi-hole, from DHCP)
Manual DNS overrides None
Internet Working (47ms to 8.8.8.8)
DNS resolution google.com via Pi-hole
Tailscale All nodes visible, Proxmox direct

Running Services

Docker VM (192.168.0.10)

Container Status
caddy Up (healthy)
vaultwarden Up (healthy)
pihole Up (healthy)
watchtower Up (healthy)

VPS (100.77.172.46)

Container Status
headscale Running
uptime-kuma Running
caddy Running
ntfy Running
headscale-backup Running

Tailscale Mesh

Node Tailscale IP Status
augustos-macbook-air 100.86.220.9 Active
oga (Proxmox) 100.78.12.241 Active, direct
docker 100.68.63.168 Active
opnsense 100.79.230.235 Active
beryl-ax 100.102.244.131 Active
mombeu 100.110.253.126 Active

Key Files

File Location
Proxmox network config /etc/network/interfaces + /etc/network/interfaces.d/vmbr1
Proxmox config backup /etc/network/interfaces.original, vmbr1.original
OPNsense config /conf/config.xml
OPNsense config backup /conf/config.xml.bak
DHCP generated config /var/dhcpd/etc/dhcpd.conf
Docker VM network /etc/network/interfaces (192.168.0.10, gw 192.168.0.1)
Cutover execution plan docs/opnsense-cutover-execution-2026-02-21.md

Useful Commands

# OPNsense access via SSH tunnel
ssh -J augusto@100.78.12.241 root@192.168.0.1

# OPNsense web UI via SSH tunnel
ssh -L 8443:192.168.0.1:443 augusto@100.78.12.241
# Then open https://localhost:8443

# TP-Link admin via SSH tunnel
ssh -L 8080:192.168.0.2:80 augusto@100.78.12.241
# Then open http://localhost:8080

# Restart OPNsense DHCP
ssh -J augusto@100.78.12.241 root@192.168.0.1 'configctl dhcpd restart'

# Reconfigure OPNsense WAN (force DHCP re-request)
configctl interface reconfigure wan

# Check DHCP leases on Mac
ipconfig getpacket en0

# Check firewall rules on OPNsense
pfctl -sr | grep vtnet1
pfctl -sn