Install OPNsense Firewall/Router in VirtualBox
Create a two-interface OPNsense VM and complete its initial LAN configuration
Create a two-interface OPNsense VM and complete its initial LAN configuration
Force client DNS queries through the local OPNsense DNS service regardless of which DNS server a client is configured to use.
Create a VPN VLAN on OPNsense so a separate Wi-Fi SSID can use NordVPN without a VPN app on each phone.
Configure the NordVPN client on OPNsense and route a dedicated VLAN and Wi-Fi access point through the VPN.
Configure an OPNsense captive portal and limit guest-network bandwidth.
Use a domain name to access OPNsense, issue a Let's Encrypt certificate, and prepare a reverse proxy for web services.
Install AdGuard Home on OPNsense to block advertisements and trackers with DNS for all network clients.
Separate Guest traffic from the main network, manage Guest bandwidth, and require a captive-portal page before Internet access.
Put the ISP modem into bridge mode and configure PPPoE on OPNsense.