network - BOTUM Tech Blog

opnsense

OPNsense Hub: 18 Guides for Enterprise Network Infrastructure

Entry point for the BOTUM OPNsense series — 18 guides to deploy a complete enterprise network infrastructure: firewall, Zero Trust VLANs, WireGuard, Suricata IDS/IPS, Grafana, CARP HA, Wazuh SIEM, Ansible as Code.

Stacks

Managing WiFi and APs with OPNsense: SSIDs per VLAN and Network Isolation

Segment your WiFi by VLAN with OPNsense: isolated IoT, Work and Guest SSIDs, 802.1Q trunking, UniFi/Omada configuration, firewall rules.

Stacks

WireGuard VPN and LTE Failover with OPNsense: Remote Access and Network Resilience

How to deploy WireGuard VPN on OPNsense for secure remote access and configure automatic LTE failover (SD-WAN) with a 4G/5G USB dongle. Complete guide: site-to-site tunnel, remote workers, Gateway Groups.

Stacks

OPNsense VLANs and Zero Trust: Complete Configuration Guide

Complete guide to configuring 4 VLANs (IoT, Work, Guest, DMZ) with OPNsense and Zero Trust inter-VLAN firewall rules.

network

WireGuard: Site-to-Site VPN to Replace Your MPLS

Deploy WireGuard site-to-site to replace your MPLS. Full guide: installation, peer configuration, inter-VLAN routing on Ubuntu.

network

DIY SD-WAN: Replace MPLS with WireGuard + OPNsense

Build your own SD-WAN with WireGuard + OPNsense. Hub-and-spoke, QoS, multi-WAN failover. Save $43,200/year vs MPLS.

network

VLANs and Zero Trust: Segment Your Network Like an Enterprise

VLANs and Zero Trust guide: 5-VLAN architecture, 802.1Q switch, OPNsense and inter-VLAN firewall rules.