Running Gateway on OPNsense firewall

OPNsense plugin

OPNsense® is an open source, feature rich firewall and routing platform, offering cutting-edge network protection.

To start Defguard Gateway as OPNsense plugin:

1. On the release page find and download OPNsense package which will be named: defguard-gateway_VERSION_x86_64-unknown-opnsense.pkg – this package includes both Defguard Gateway and OPNsense plugin.

2. Install the package:

pkg add defguard-gateway_VERSION_x86_64-unknown-opnsense.pkg

1. Refresh your OPNsense UI by running command below:

opnsense-patch

1. Go to your OPNsense UI and navigate to VPN > Defguard Gateway.

1. Fill out the form with appropriate values, click Save, and then click Start/Restart.

You can find detailed description of all fields here.

If everything went well, Defguard Gateway should be connected to Defguard Core and you can start adding new devices to your network.

See also: how to configure Defguard in OPNsense

Binary Install

1. Checkout Gateway releases here and download compatible binary from GitHub page.

2. Decompress and move to bin directory

tar xcf ./gateway.tar.gz
sudo chmod +x gateway
sudo mv gateway /usr/bin/

1. Start gateway gateway -g <CORE_GRPC_URL:GRPC_PORT> -t <DEFGUARD_TOKEN>