Setting up OPNSense on ProtectLi for home use with parental control (Part 3: IOT Subnet)

Photo by Jordan Harrison on Unsplash

I recently purchased a ProtectLi Vault with OPNSense preinstalled. In the last article, I described how to setup OPNSense with simple blacklist and parental control which blocks internet access at night.

In this article, I will go through how to create a separate IOT subnet for all your smart devices.

First, we need to enable OPT1 and OPT2. The ProtectLi that I got have 4 ports. However, by default, OPT1 and OPT2 are not enabled.

Let’s go into the interfaces and enable them.

Head over the Interfaces-> OPT1

Check the box for Enable Interface

Set the IP Address to 10.255.20.1/24

Click [Save] and repeat the same for OPT2.

For OPT2, I changed the name from OPT2 to OPT2IOT

Set the IP Address of OPT2IOT to 10.255.30.1/24

Next, we need to turn on DHCP Server for these two interfaces

Head over to Services->DHCPv4->OPT1