[{"data":1,"prerenderedAt":902},["ShallowReactive",2],{"navigation":3,"index":173,"mdc-w734ds-key":250,"mdc-e4kh27-key":263,"mdc-50apw4-key":272,"index-blogs":281},[4],{"title":5,"path":6,"stem":7,"children":8,"page":172},"Blog","\u002Fblog","blog",[9,13,17,21,25,29,33,37,41,45,49,53,57,61,65,69,73,77,81,85,89,93,97,101,105,109,113,117,121,125,129,133,137,141,145,149,153,157,161,165,169],{"title":10,"path":11,"stem":12},"Proxmox Remove Node from Cluster","\u002Fblog\u002Fproxmox-remove-node-from-cluster","blog\u002FProxmox-Remove-Node-from-Cluster",{"title":14,"path":15,"stem":16},"Proxmox Can't Live Migrate without with local disks option","\u002Fblog\u002Fproxmox-cant-live-migrate-without-local-disk-option","blog\u002FProxmox-cant-live-migrate-without-local-disk-option",{"title":18,"path":19,"stem":20},"Sharing large files with Send Firefox for free!","\u002Fblog\u002Fsharing-large-files-with-send-firefox","blog\u002FSharing-large-files-with-send-firefox",{"title":22,"path":23,"stem":24},"Windows Tips and My Favorite Password Manager","\u002Fblog\u002Fwindows-tips-and-my-favorite-password-manager","blog\u002FWindows-Tips-and-My-Favorite-Password-Manager",{"title":26,"path":27,"stem":28},"Add Docker Capabilities to TrueNAS Core","\u002Fblog\u002Fadd-docker-capabilities-to-truenas-core","blog\u002Fadd-docker-capabilities-to-truenas-core",{"title":30,"path":31,"stem":32},"Backup Office 365 OneDrive or SharePoint to TrueNAS","\u002Fblog\u002Fbackup-office-365-onedrive-or-sharepoint-to-truenas","blog\u002Fbackup-office-365-onedrive-or-sharepoint-to-truenas",{"title":34,"path":35,"stem":36},"Backup TrueNAS to the Cloud with Wasabi (S3 Compatible Storage)","\u002Fblog\u002Fbackup-truenas-to-the-cloud-with-wasabi-s3-compatible-storage","blog\u002Fbackup-truenas-to-the-cloud-with-wasabi-s3-compatible-storage",{"title":38,"path":39,"stem":40},"Best Budget Security System 2019","\u002Fblog\u002Fbest-budget-security-system-2019","blog\u002Fbest-budget-security-system-2019",{"title":42,"path":43,"stem":44},"Can AI Be a System Administrator? Fixing a Stuck Windows 11 Upgrade","\u002Fblog\u002Fcan-ai-be-a-system-administrator-fixing-a-stuck-windows-11-upgrade","blog\u002Fcan-ai-be-a-system-administrator-fixing-a-stuck-windows-11-upgrade",{"title":46,"path":47,"stem":48},"Create Windows 10 Virtual Machine on Proxmox","\u002Fblog\u002Fcreate-windows-10-virtual-machine-on-proxmox","blog\u002Fcreate-windows-10-virtual-machine-on-proxmox",{"title":50,"path":51,"stem":52},"Enable Super Fast Search on Server","\u002Fblog\u002Fenable-super-fast-search-on-server","blog\u002Fenable-super-fast-search-on-server",{"title":54,"path":55,"stem":56},"Essential Waterproof Beach Tech","\u002Fblog\u002Fessential-waterproof-beach-tech","blog\u002Fessential-waterproof-beach-tech",{"title":58,"path":59,"stem":60},">-","\u002Fblog\u002Ffree-remote-desktop-access-with-google-chrome-remote-desktop","blog\u002Ffree-remote-desktop-access-with-google-chrome-remote-desktop",{"title":62,"path":63,"stem":64},"FreeNAS can Host Virtual Machines: Using the bhyve Hypervisor from the Web GUI","\u002Fblog\u002Ffreenas-can-host-virtual-machines-using-the-bhyve-hypervisor-from-the-web-gui","blog\u002Ffreenas-can-host-virtual-machines-using-the-bhyve-hypervisor-from-the-web-gui",{"title":66,"path":67,"stem":68},"HAProxy 2.4 Install and Basic Setup On Ubuntu 20.04 LTS","\u002Fblog\u002Fhaproxy-2-4-install-and-basic-setup-on-ubuntu-20-04-lts","blog\u002Fhaproxy-2-4-install-and-basic-setup-on-ubuntu-20-04-lts",{"title":70,"path":71,"stem":72},"How to backup virtual machines to a NAS using NFS","\u002Fblog\u002Fhow-to-backup-virtual-machines-to-a-nas-using-nfs-1","blog\u002Fhow-to-backup-virtual-machines-to-a-nas-using-nfs-1",{"title":74,"path":75,"stem":76},"How to Enable Clipboard History in Windows 10","\u002Fblog\u002Fhow-to-enable-clipboard-history-in-windows-10","blog\u002Fhow-to-enable-clipboard-history-in-windows-10",{"title":78,"path":79,"stem":80},"How To Enable Screensavers On Windows 10","\u002Fblog\u002Fhow-to-enable-screensavers-on-windows-10","blog\u002Fhow-to-enable-screensavers-on-windows-10",{"title":82,"path":83,"stem":84},"How To get started blogging or build a website for free","\u002Fblog\u002Fhow-to-get-started-blogging-or-build-a-website-for-free","blog\u002Fhow-to-get-started-blogging-or-build-a-website-for-free",{"title":86,"path":87,"stem":88},"How to Install OPNSense Firewall?","\u002Fblog\u002Fhow-to-install-opnsense","blog\u002Fhow-to-install-OPNSense",{"title":90,"path":91,"stem":92},"How to Install FreeNAS from ISO","\u002Fblog\u002Fhow-to-install-freenas-from-iso","blog\u002Fhow-to-install-freenas-from-iso",{"title":94,"path":95,"stem":96},"How to Manage Windows Defender Antivirus with PowerShell","\u002Fblog\u002Fhow-to-manage-windows-defender-antivirus-with-powershell","blog\u002Fhow-to-manage-windows-defender-antivirus-with-powershell",{"title":98,"path":99,"stem":100},"How to Schedule Backups with Proxmox on a Local Directory","\u002Fblog\u002Fhow-to-schedule-backups-with-proxmox-on-a-local-directory","blog\u002Fhow-to-schedule-backups-with-proxmox-on-a-local-directory",{"title":102,"path":103,"stem":104},"Installing Docker and Portainer on Proxmox","\u002Fblog\u002Finstalling-docker-and-portainer-on-proxmox","blog\u002Finstalling-docker-and-portainer-on-proxmox",{"title":106,"path":107,"stem":108},"LAMP Stack Install Ubuntu 18 04: Linux Apache MySQL and PHP","\u002Fblog\u002Flamp-stack-install-ubuntu-18-04-linux-apache-mysql-and-php","blog\u002Flamp-stack-install-ubuntu-18-04-linux-apache-mysql-and-php",{"title":110,"path":111,"stem":112},"Microsoft Excel Keyboard Shortcuts","\u002Fblog\u002Fmicrosoft-excel-keyboard-shortcuts","blog\u002Fmicrosoft-excel-keyboard-shortcuts",{"title":114,"path":115,"stem":116},"Microsoft Word Keyboard Shortcuts","\u002Fblog\u002Fmicrosoft-word-keyboard-shortcuts","blog\u002Fmicrosoft-word-keyboard-shortcuts",{"title":118,"path":119,"stem":120},"Multiple Proxmox Hosts With Duplicate Virtual Machine IDs on Shared NFS Storage","\u002Fblog\u002Fmultiple-proxmox-hosts-with-duplicate-virtual-machine-ids-on-shared-nfs-storage","blog\u002Fmultiple-proxmox-hosts-with-duplicate-virtual-machine-ids-on-shared-nfs-storage",{"title":122,"path":123,"stem":124},"OPNSense Setup Multi-LAN, DHCP Static Assignment and More (Part 3)","\u002Fblog\u002Fopnsense-setup-multi-lan-dhcp-static-assignment-and-more-part-3","blog\u002Fopnsense-setup-multi-lan-dhcp-static-assignment-and-more-part-3",{"title":126,"path":127,"stem":128},"Remote Gaming and Video editing with Proxmox GPU passthrough","\u002Fblog\u002Fremote-gaming-and-video-editing-with-proxmox-gpu-passthrough","blog\u002Fremote-gaming-and-video-editing-with-proxmox-gpu-passthrough",{"title":130,"path":131,"stem":132},"Secure Your Nextcloud with HTTPS hosted on TrueNAS 12 Core with Nginx","\u002Fblog\u002Fsecure-your-nextcloud-with-https-hosted-on-truenas-12-core-with-nginx-proxy-manager","blog\u002Fsecure-your-nextcloud-with-https-hosted-on-truenas-12-core-with-nginx-proxy-manager",{"title":134,"path":135,"stem":136},"Setup NextCloud on Ubuntu 18.04 LTS with Apache2, MariaDB and PHP","\u002Fblog\u002Fsetup-nextcloud-on-ubuntu-18-04-lts-with-apache2-mariadb-and-php","blog\u002Fsetup-nextcloud-on-ubuntu-18-04-lts-with-apache2-mariadb-and-php",{"title":138,"path":139,"stem":140},"Setup Wizard and How to Backup OPNSense Firewall (Part 2)","\u002Fblog\u002Fsetup-wizard-and-how-to-backup-opnsense-firewall-part-2","blog\u002Fsetup-wizard-and-how-to-backup-opnsense-firewall-part-2",{"title":142,"path":143,"stem":144},"TrueNAS Nginx Proxy Jail with Let's Encrypt for your NextCloud","\u002Fblog\u002Ftruenas-nginx-proxy-jail-with-lets-encrypt-for-your-nextcloud","blog\u002Ftruenas-nginx-proxy-jail-with-lets-encrypt-for-your-nextcloud",{"title":146,"path":147,"stem":148},"Upgrading FreeNAS 11.3 to TrueNAS 12 Release","\u002Fblog\u002Fupgrading-freenas-11-3-to-truenas-12-release","blog\u002Fupgrading-freenas-11-3-to-truenas-12-release",{"title":150,"path":151,"stem":152},"What Does Secure Website Mean And How To Tell?","\u002Fblog\u002Fwhat-does-secure-website-mean-and-how-to-tell","blog\u002Fwhat-does-secure-website-mean-and-how-to-tell",{"title":154,"path":155,"stem":156},"Windows 10 Quick Tip #1: Customize Your Taskbar","\u002Fblog\u002Fwindows-10-quick-tip-1-customize-your-taskbar","blog\u002Fwindows-10-quick-tip-1-customize-your-taskbar",{"title":158,"path":159,"stem":160},"Windows 10 QuickTip #2 Free Up Disk Drive Space by enabling Storage Sense","\u002Fblog\u002Fwindows-10-quicktip-2-free-up-disk-drive-space-by-enabling-storage-sense","blog\u002Fwindows-10-quicktip-2-free-up-disk-drive-space-by-enabling-storage-sense",{"title":162,"path":163,"stem":164},"Windows 10 QuickTip #4 Backup Your Windows PC for Free with OneDrive","\u002Fblog\u002Fwindows-10-quicktip-4-backup-your-windows-pc-for-free-with-onedrive","blog\u002Fwindows-10-quicktip-4-backup-your-windows-pc-for-free-with-onedrive",{"title":166,"path":167,"stem":168},"Windows 10 QuickTip #5 Zoom in and Zoom out on Your Web Browser","\u002Fblog\u002Fwindows-10-quicktip-5-zoom-in-and-zoom-out-on-your-web-browser","blog\u002Fwindows-10-quicktip-5-zoom-in-and-zoom-out-on-your-web-browser",{"title":58,"path":170,"stem":171},"\u002Fblog\u002Fwindows-10-quicktip-backup-your-windows-pc-for-free-with-google-backup-and-sync","blog\u002Fwindows-10-quicktip-backup-your-windows-pc-for-free-with-google-backup-and-sync",false,{"id":174,"title":175,"about":176,"blog":179,"body":182,"description":183,"experience":184,"extension":203,"faq":204,"hero":220,"meta":242,"navigation":243,"path":244,"seo":245,"stem":248,"testimonials":182,"__hash__":249},"index\u002Findex.yml","Hey, I'm Kevin 'EverGreen' Stevenson",{"title":177,"description":178},"About Me","Father, runner, IT guru and programmer. I run a home lab for fun, make DIY tech tutorials on my YouTube channel (@phasedlogix), and log my marathon training here when I'm not racking servers.\nTheEverGreen.Me is where the written companion content lives — build guides, configs, and gear notes.\n",{"title":180,"description":181},"Latest Posts","Guides, configs and logs",null,"Runner • Sysadmin • Programmer. I break things in my home lab so you don't have to — then film it and write it up.",{"title":185,"items":186},"Around the Web",[187,195],{"position":188,"date":189,"company":190},"Home lab builds & tutorials on","YouTube",{"name":191,"logo":192,"url":193,"color":194},"PhasedLogix","i-simple-icons-youtube","https:\u002F\u002Fwww.youtube.com\u002F@phasedlogix","#FF0000",{"position":196,"date":197,"company":198},"MSP & CMMC consulting at","Work",{"name":199,"logo":200,"url":201,"color":202},"PhasedLogix IT","i-lucide-building-2","https:\u002F\u002Fphasedlogix.com","#22c55e","yml",{"title":205,"description":206,"categories":207},"Questions People Ask","Quick answers about this site and its content.",[208],{"title":209,"questions":210},"The Site",[211,214,217],{"label":212,"content":213},"What is TheEverGreen.Me?","My personal creator hub for DIY tech and running content. Home lab build guides, configs, gear notes and training logs — the written companion to my YouTube channel.\n",{"label":215,"content":216},"Where are the videos?","On YouTube at @phasedlogix. Most project write-ups here link to the matching video walkthrough.\n",{"label":218,"content":219},"Is this a business site?","No — that's PhasedLogix.com (managed IT and CMMC readiness consulting). This site is personal: hobbies, projects and running.\n",{"links":221,"images":226},[222],{"label":223,"to":193,"color":224,"icon":192,"target":225},"Watch on YouTube","neutral","_blank",[227,230,233,236,239],{"src":228,"alt":229},"\u002Fhero\u002Fhomelab.jpg","Home lab server rack",{"src":231,"alt":232},"\u002Fhero\u002Flinux-workstation.jpg","Fiber patch panel",{"src":234,"alt":235},"\u002Fhero\u002Fcode-screen.jpg","Workstation with code on screen",{"src":237,"alt":238},"\u002Fhero\u002Fserver-rack.jpg","Network switch with cables",{"src":240,"alt":241},"\u002Fhero\u002Foffice-corridor.jpg","Modern office corridor",{},true,"\u002F",{"title":246,"description":247},"Kevin Stevenson - DIY Tech & Running","Home lab builds, DIY tech guides and running logs from Kevin 'EverGreen' Stevenson. Companion content for the PhasedLogix YouTube channel.","index","-c8Xicv_hsPYeuus2GIiKbMY_XUzIaHV4VeT3VqLutc",{"data":251,"body":252},{},{"type":253,"children":254},"root",[255],{"type":256,"tag":257,"props":258,"children":259},"element","p",{},[260],{"type":261,"value":262},"text","My personal creator hub for DIY tech and running content. Home lab build guides, configs, gear notes and training logs — the written companion to my YouTube channel.",{"data":264,"body":265},{},{"type":253,"children":266},[267],{"type":256,"tag":257,"props":268,"children":269},{},[270],{"type":261,"value":271},"On YouTube at @phasedlogix. Most project write-ups here link to the matching video walkthrough.",{"data":273,"body":274},{},{"type":253,"children":275},[276],{"type":256,"tag":257,"props":277,"children":278},{},[279],{"type":261,"value":280},"No — that's PhasedLogix.com (managed IT and CMMC readiness consulting). This site is personal: hobbies, projects and running.",[282,542,720],{"id":283,"title":42,"author":284,"body":288,"date":529,"description":530,"extension":531,"image":532,"meta":533,"minRead":539,"navigation":243,"path":43,"seo":540,"stem":44,"__hash__":541},"blog\u002Fblog\u002Fcan-ai-be-a-system-administrator-fixing-a-stuck-windows-11-upgrade.md",{"name":285,"avatar":286},"Kevin Stevenson",{"src":287,"alt":285},"\u002Favatar.png",{"type":289,"value":290,"toc":515},"minimark",[291,294,297,320,323,328,334,339,342,349,357,361,367,386,389,393,400,407,411,414,430,433,437,440,456,463,466,470,496,500,508],[257,292,293],{},"If you're not using AI in your system administration work, you might be missing out on a lot. But you can't just trust whatever it spits out, even from the big frontier models.",[257,295,296],{},"To put that to the test, I took a real problem from my home lab: a Windows 11 Pro VM stuck on 21H2, which hit end of life in June 2023 and stopped receiving updates. Windows Update just won't budge. So I put three AIs on the case:",[298,299,300,308,314],"ul",{},[301,302,303,307],"li",{},[304,305,306],"strong",{},"Qwen3 14B"," running locally in LM Studio",[301,309,310,313],{},[304,311,312],{},"Qwen3 27B"," running in VS Code",[301,315,316,319],{},[304,317,318],{},"Google Gemini"," (cloud\u002Ffrontier model)",[257,321,322],{},"I wanted to see how each one approached the problem and whether their answers held up. Here's what happened.",[324,325,327],"h3",{"id":326},"full-video","Full video",[329,330],"iframe",{"style":331,"src":332,"allow":333,"allowFullScreen":243},"width:100%; aspect-ratio:16\u002F9; border:0; border-radius:0.5rem;","https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FGm31dN0itCo","accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture",[335,336,338],"h2",{"id":337},"setting-up-the-ai-lineup","Setting up the AI lineup",[257,340,341],{},"I gave all three AIs the same starting prompt, a short \"you are an expert system administrator\" setup, so everyone was on the same playing field.",[257,343,344,345,348],{},"One catch right away: ",[304,346,347],{},"the local 14B model doesn't support images."," I could paste screenshots of the Windows Update screen straight into Gemini and VS Code, but for LM Studio I had to describe the screenshot in text instead.",[257,350,351,352,356],{},"Also useful: telling them to ",[353,354,355],"em",{},"stop being verbose",". A quick \"short answer only\" instruction got the 27B and Gemini to cut the chatty diagnostics down to something usable.",[335,358,360],{"id":359},"the-ais-disagree","The AIs disagree",[257,362,363,364],{},"With the problem described, I asked all three: ",[353,365,366],{},"\"I need to upgrade to the latest version of Windows 11. It's stuck on 21H2.\"",[298,368,369,381],{},[301,370,371,373,374,377,378],{},[304,372,312],{}," and ",[304,375,376],{},"Gemini"," both suspected a ",[304,379,380],{},"TPM issue",[301,382,383,385],{},[304,384,306],{}," went off in a completely different direction and suggested Hyper-V checks — which was off base, since this VM isn't even on Hyper-V",[257,387,388],{},"Two out of three agreeing isn't proof, but it's worth a check.",[335,390,392],{"id":391},"verifying-the-tpm-diagnosis","Verifying the TPM diagnosis",[257,394,395,396,399],{},"You verify AI answers the same way you'd verify a coworker's. I opened Computer Management → Device Manager and confirmed the VM ",[304,397,398],{},"does"," have TPM 2.0. Then I fed that result back to all three AIs.",[257,401,402,403,406],{},"The 27B kept pushing update drivers and other fixes, but Gemini's response was the one that landed: the upgrade was blocked because of the ",[304,404,405],{},"CPU",", not the TPM. That matched my own suspicion. The VM's Proxmox CPU type was the problem.",[335,408,410],{"id":409},"the-real-culprit-proxmox-cpu-type","The real culprit: Proxmox CPU type",[257,412,413],{},"In Proxmox, the VM's CPU type was set to an older default, and Windows 11's upgrade checks reject it. The fix:",[415,416,417,420,427],"ol",{},[301,418,419],{},"Shut down the VM",[301,421,422,423,426],{},"In Proxmox, change the ",[304,424,425],{},"CPU Type"," on the VM's hardware settings (I went one version back first, then moved forward when that worked)",[301,428,429],{},"Boot it back up and confirm the new CPU shows up in Windows. Device Manager now reported a virtual CPU 2.5+",[257,431,432],{},"With the CPU fixed, those blockers were gone. But Windows Update still offered nothing, so it was time for the manual route.",[335,434,436],{"id":435},"downloading-and-mounting-the-windows-11-iso","Downloading and mounting the Windows 11 ISO",[257,438,439],{},"The reliable way to force this upgrade:",[415,441,442,445,448],{},[301,443,444],{},"Download the Windows 11 ISO from Microsoft",[301,446,447],{},"Mount it in the VM (on my machine it showed up as the F: drive)",[301,449,450,451,455],{},"Run ",[452,453,454],"code",{},"setup.exe"," from the mounted drive",[257,457,458,459,462],{},"Because I was working in PowerShell, I used the ",[452,460,461],{},".\\setup.exe"," form. PowerShell wants the explicit path qualifier for the current directory.",[257,464,465],{},"The upgrade kicked off. Windows logo, \"Preparing,\" and we're finally off 21H2.",[335,467,469],{"id":468},"takeaways","Takeaways",[298,471,472,478,484,490],{},[301,473,474,477],{},[304,475,476],{},"AI is a good sysadmin copilot, not an autopilot."," The local 14B model was confidently wrong. Even the frontier model needed a nudge toward the real root cause.",[301,479,480,483],{},[304,481,482],{},"Verify everything."," Checking Device Manager for TPM 2.0 took two minutes and ruled out two of the three diagnoses.",[301,485,486,489],{},[304,487,488],{},"Local models have real limits."," No image support on the 14B meant extra work describing screens. It still runs entirely on my own hardware, though.",[301,491,492,495],{},[304,493,494],{},"The classic fixes still apply."," Sometimes the answer is just \"mount the ISO and run setup.\"",[324,497,499],{"id":498},"support-my-work","SUPPORT MY WORK",[257,501,502],{},[503,504,507],"a",{"href":201,"rel":505},[506],"nofollow","Hire US",[257,509,510],{},[503,511,514],{"href":512,"rel":513},"https:\u002F\u002Fwww.buymeacoffee.com\u002Fgetmethegeek",[506],"Buy Me a Coffee",{"title":516,"searchDepth":517,"depth":517,"links":518},"",2,[519,521,522,523,524,525,526],{"id":326,"depth":520,"text":327},3,{"id":337,"depth":517,"text":338},{"id":359,"depth":517,"text":360},{"id":391,"depth":517,"text":392},{"id":409,"depth":517,"text":410},{"id":435,"depth":517,"text":436},{"id":468,"depth":517,"text":469,"children":527},[528],{"id":498,"depth":520,"text":499},"2026-08-27","I gave three AIs (Qwen3 14B, Qwen3 27B, and Gemini) a Windows 11 VM stuck on end-of-life 21H2. Two got it wrong. How to use AI as a sysadmin copilot without blindly trusting it.","md","\u002Fimages\u002Fblog\u002Fcan-ai-be-a-system-administrator-fixing-a-stuck-windows-11-upgrade.webp",{"tags":534},[535,536,537,538],"ai","proxmox","windows-11","homelab",5,{"title":42,"description":530},"Vvsncg5qL0l931UvWth4qMWe_dP1JKZ849EejW_xrfY",{"id":543,"title":122,"author":544,"body":546,"date":714,"description":715,"extension":531,"image":716,"meta":717,"minRead":520,"navigation":243,"path":123,"seo":718,"stem":124,"__hash__":719},"blog\u002Fblog\u002Fopnsense-setup-multi-lan-dhcp-static-assignment-and-more-part-3.md",{"name":285,"avatar":545},{"src":287,"alt":285},{"type":289,"value":547,"toc":707},[548,551,554,557,560,562,566,569,572,578,581,586,589,594,597,600,605,608,612,615,618,621,627,633,639,645,648,653,659,662,665,670,673,678,681,684,686,691,696,698],[549,550],"hr",{},[257,552,553],{},"In the previous blogs, we have discussed the installations of the\nOPNSense firewall, setup Wizard and how to backup OPNSense Firewall.\nThis blog will discuss configuring multiple LAN and DHCP static\nassignments. Let's get started.",[324,555,556],{"id":326},"Full Video",[329,558],{"style":331,"src":559,"allow":333,"allowFullScreen":243},"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FVegl9azqY9A",[549,561],{},[335,563,565],{"id":564},"multiple-lan-setup","Multiple LAN Setup",[257,567,568],{},"Login to the OPNSense firewall and go to Dashboard Lobby. On the side\nmenu, go to the 'Interfaces', and there are LAN and WAN setups that we\nhave already set up. To configure LAN and WAN interfaces, read the\nprevious blog.",[257,570,571],{},"Then go to 'Assignments' in the Interfaces tab. To add a new\ninterface, click the 'Add' button.",[257,573,574],{},[575,576],"img",{"alt":516,"src":577},"images\u002Fblog\u002Fmulti-1.png",[257,579,580],{},"By clicking the Add button, you will go to the next screen, and it\nautomatically gives it the name 'OPT1' and sets it up for that.",[257,582,583],{},[575,584],{"alt":516,"src":585},"images\u002Fblog\u002Fmulti-2.png",[257,587,588],{},"You will see that this interface is not enabled by default. For that,\ntake a look at the LAN interface. You will see that the LAN interface is\nenabled here.",[257,590,591],{},[575,592],{"alt":516,"src":593},"images\u002Fblog\u002Fmulti-3.png",[257,595,596],{},"We need to do the same thing on 'OPT1'. Click the 'Enable Interface'\nand add a description, select IPv4 Configuration Type as 'Static IPv4'\nand enter the IPv4 address.",[257,598,599],{},"Click the 'Save' button and then apply changes.",[257,601,602],{},[575,603],{"alt":516,"src":604},"images\u002Fblog\u002Fmulti-4.png",[257,606,607],{},"Now let's move towards setting up the DHCP server.",[335,609,611],{"id":610},"dhcp-server-setup","DHCP Server Setup",[257,613,614],{},"DHCP is used to provide clients with an IP address automatically. It is\navailable for both IPv4 and IPv6 clients, known as DHCP v4 and DHCPv6,\nrespectively.",[257,616,617],{},"To configure the DHCP for a VLAN, you need to enable IPV4 and IPV6 on\nthe VLAN interface. You can't enable DHCP until you do this. Go to the\n'Services' section, and there you see the DHCP option with LAN,\ninterfaces, relay, leases, and log file.",[257,619,620],{},"The DHCPv4 submenu consists of:",[257,622,623,626],{},[304,624,625],{},"Interface:"," An entry per interface or general settings, such as a\ntoggle to enable\u002Fdisable DHCP for this interface, DNS servers, DHCP\nrange, and more.",[257,628,629,632],{},[304,630,631],{},"Relay:"," DHCP requests can be forwarded to the DHCP server on another\ninterface. It is called relaying.",[257,634,635,638],{},[304,636,637],{},"Leases:"," Display all IP addresses handed out to the clients.",[257,640,641,644],{},[304,642,643],{},"Log File:"," This shows all the DHCP server log files.",[257,646,647],{},"Make sure you have a static IPv4 selected if you are using IPv4. Now\nenable the DHCP service.",[257,649,650],{},[575,651],{"alt":516,"src":652},"images\u002Fblog\u002Fmulti-5.png",[257,654,655,658],{},[304,656,657],{},"Note:"," The IP address range is 192.168.22.1-192.168.22.254, defined\nby the \"\u002F24' CIDR prefix.",[257,660,661],{},"After entering the IP addresses, click the 'Save' button. Go to the\nlobby dashboard and ensure that the DHCP server is configured.",[257,663,664],{},"Now go to the Services > DHCPv4 > Leases and see the MAC addresses.\nIt's better to get them from the 'Leases' page rather than from the\ndevice itself and writing down the MAC address.",[257,666,667],{},[575,668],{"alt":516,"src":669},"images\u002Fblog\u002Fmulti-6.png",[257,671,672],{},"When you open the new static DHCP page, you should fill out some basic\nrequirements for settings. These include IP address, MAC address, and\nhostname.",[257,674,675],{},[575,676],{"alt":516,"src":677},"images\u002Fblog\u002Fmulti-7.png",[257,679,680],{},"After that, click the 'Save' button and apply changes. That's how we\ncreate a DHCP static assignment.",[257,682,683],{},"While using the DHCP, make sure that you are only using one DHCP server\non one network at a time. Otherwise, you may face issues with IP\naddressing. However, it's fine to run more DHCP servers if they are on\nseparate networks.",[324,685,499],{"id":498},[257,687,688],{},[503,689,507],{"href":201,"rel":690},[506],[257,692,693],{},[503,694,514],{"href":512,"rel":695},[506],[549,697],{},[257,699,700],{},[353,701,702,703],{},"This Article has been Republished with Permission from ",[503,704,191],{"href":705,"rel":706},"https:\u002F\u002Fphasedlogix.com\u002Fopnsense-setup-multi-lan-dhcp-static-assignment-and-more-part-3\u002F",[506],{"title":516,"searchDepth":517,"depth":517,"links":708},[709,710,711],{"id":326,"depth":520,"text":556},{"id":564,"depth":517,"text":565},{"id":610,"depth":517,"text":611,"children":712},[713],{"id":498,"depth":520,"text":499},"2022-04-25","In the previous blogs, we have discussed the installations of the","\u002Fimages\u002Fblog\u002Fvegl9azqy9a-hd.jpg",{},{"title":122,"description":715},"J7GBES17VQ8VGvyNAJAO0szWQLQIe07V3W5kGhIXhVQ",{"id":721,"title":138,"author":722,"body":724,"date":896,"description":897,"extension":531,"image":898,"meta":899,"minRead":520,"navigation":243,"path":139,"seo":900,"stem":140,"__hash__":901},"blog\u002Fblog\u002Fsetup-wizard-and-how-to-backup-opnsense-firewall-part-2.md",{"name":285,"avatar":723},{"src":287,"alt":285},{"type":289,"value":725,"toc":882},[726,729,731,734,738,741,744,747,752,756,759,762,767,771,774,779,783,786,791,794,799,803,806,811,815,818,823,830,835,839,842,847,851,854,859,862,864,872,874],[257,727,728],{},"In a prior blog, we discussed how to download and install the OPNSense\nfirewall. OPNSense is an open-source firewall and routing platform based\non the FreeBSD operating system. This blog will discuss how to set up a\nwizard and have a backup in OPNSense. Let's get started.",[324,730,556],{"id":326},[329,732],{"style":331,"src":733,"allow":333,"allowFullScreen":243},"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F2pa-LcqwE9s",[335,735,737],{"id":736},"opensense-setup-wizard","OpenSense Setup Wizard",[257,739,740],{},"Once you complete the installation process and set the root users'\npassword, you need to restart your system to configure the installation.",[257,742,743],{},"After completing the IP address configuration, you can access the\nOPNSense web interface. Log in to the system after entering the default\nusername and password. The successful login will take you to the\nOPNSense Dashboard.",[257,745,746],{},"Go to the Lobby Dashboard for setting up wizard > General Setup Wizard.",[257,748,749],{},[575,750],{"alt":516,"src":751},"images\u002Fblog\u002Fopn-1.png",[324,753,755],{"id":754},"get-general-information","Get General Information",[257,757,758],{},"The first step is to gather general information, including hostname,\ndomain name, primary DNS Server, Secondary DNS Server, and unbound DNS.",[257,760,761],{},"It will allow the OPNSense firewall to get DNS information from the ISP\nover the WAN interface.",[257,763,764],{},[575,765],{"alt":516,"src":766},"images\u002Fblog\u002Fopn-2.png",[324,768,770],{"id":769},"time-server-information","Time Server Information",[257,772,773],{},"There are servers in the interweb that keep track of time; they are\ncalled NTP servers. The next screen will prompt for NTP servers.\nOPNSense will provide a default set of NTP server pools if users don't\nhave their own NTP systems. Set the time server information shown in the\nimage below.",[257,775,776],{},[575,777],{"alt":516,"src":778},"images\u002Fblog\u002Fopn-3.png",[324,780,782],{"id":781},"configure-wan-interface","Configure WAN Interface",[257,784,785],{},"The next step is to configure the WAN interface setup. Most internet\nservice providers for home users use DHCP to provide necessary network\nconfiguration information. Select 'DHCP' and it will instruct OPNSense\nto gather its WAN side configuration from the ISP.",[257,787,788],{},[575,789],{"alt":516,"src":790},"images\u002Fblog\u002Fopn-4.png",[257,792,793],{},"There are two default rules at the bottom of this screen to block the\nnetwork ranges. It is recommended to leave them checked unless there is\na known reason to enable these networks through the WAN interface.",[257,795,796],{},[575,797],{"alt":516,"src":798},"images\u002Fblog\u002Fopn-5.png",[324,800,802],{"id":801},"configure-lan-interface","Configure LAN Interface",[257,804,805],{},"The next step is to configure the LAN interface. Most users leave the\ndefault values. Consider some special network ranges that should be\nleveraged here, commonly referred to as RFC1918. Make sure to pick a\nnetwork range from within the RFC1918 range to avoid any issues.",[257,807,808],{},[575,809],{"alt":516,"src":810},"images\u002Fblog\u002Fopn-6.png",[324,812,814],{"id":813},"set-root-password","Set Root Password",[257,816,817],{},"The final step of the installation process is to update the root\npassword. It's recommended not to leave it default. Instead, use a\nstrong password to avoid any security risks.",[257,819,820],{},[575,821],{"alt":516,"src":822},"images\u002Fblog\u002Fopn-7.png",[257,824,825,826,829],{},"Click the '",[304,827,828],{},"Reload'"," button to apply all the changes. The Wizard will\nredirect you to the dashboard once the reload is completed.",[257,831,832],{},[575,833],{"alt":516,"src":834},"images\u002Fblog\u002Fopn-8.png",[335,836,838],{"id":837},"check-for-the-updates","Check for the Updates",[257,840,841],{},"At this point, it is recommended to check and update the system to patch\nvulnerabilities. Click on the 'Click to View Pending Updates' to view\navailable updates. These updates help to patch all the vulnerabilities\nin the system.",[257,843,844],{},[575,845],{"alt":516,"src":846},"images\u002Fblog\u002Fopn-9.png",[335,848,850],{"id":849},"configuration-backups","Configuration Backups",[257,852,853],{},"Before updating the firewall, backup your data. Encrypt the\nconfiguration file and then click 'Download Configuration.'",[257,855,856],{},[575,857],{"alt":516,"src":858},"images\u002Fblog\u002Fopn-10.png",[257,860,861],{},"Here the Wizard setup is completed. If you haven't checked the previous\nblog 'How to Install OPNSense Firewall', check that out first and then\nfollow the mentioned steps to install OPNSense and configure settings.",[324,863,499],{"id":498},[257,865,866,869],{},[503,867,507],{"href":201,"rel":868},[506],[503,870,514],{"href":512,"rel":871},[506],[549,873],{},[257,875,876],{},[353,877,702,878],{},[503,879,191],{"href":880,"rel":881},"https:\u002F\u002Fphasedlogix.com\u002Fsetup-wizard-and-how-to-backup-opnsense-firewall-part-2\u002F",[506],{"title":516,"searchDepth":517,"depth":517,"links":883},[884,885,892,893],{"id":326,"depth":520,"text":556},{"id":736,"depth":517,"text":737,"children":886},[887,888,889,890,891],{"id":754,"depth":520,"text":755},{"id":769,"depth":520,"text":770},{"id":781,"depth":520,"text":782},{"id":801,"depth":520,"text":802},{"id":813,"depth":520,"text":814},{"id":837,"depth":517,"text":838},{"id":849,"depth":517,"text":850,"children":894},[895],{"id":498,"depth":520,"text":499},"2022-04-19","OPNSense is an open-source firewall and routing platform based on","\u002Fimages\u002Fblog\u002Fopnsense-2-cover.jpg",{},{"title":138,"description":897},"UHIE3L8oeVjdN481lfRDz-yCbVhKYDrDrXc89nKd6y0",1789484069818]