Multi-WAN Routing // VERSION: v24.7 LTS // LICENSE: BSD-2-Clause
● 100% LOCAL LAN EXECUTION (1.8 GB ISO • 4 GB RAM)
OPNsense / pfSense Multi-WAN Enterprise Firewall
Protocols: Gateway Groups • WireGuard • BGP/OSPF • UK Regulatory Clearance: 100% cleared for UK commercial networks under BSD-2-Clause license; no Ofcom RF transmission license required on wired/VLAN gateways.
Architectural Overview
Turns our fanless 12V DC Protectli Vault Intel N100 appliance into an enterprise border firewall with sub-second Multi-WAN failover across FTTP fibre, Teltonika 5G cellular, and Starlink DC.
72-Hour Blackout Plant-Room Use Case
Automatically detects upstream ISP packet loss (when street fibre is severed even though the local ONT Ethernet link stays "up"), shifts VoIP/EPOS/production VLANs onto 5G or Starlink, and throttles non-essential guest Wi-Fi.
Production Configuration & Deployment Snippet
# OPNsense Gateway Group Tiering (System -> Gateways -> Group) Tier 1 (Primary): WAN_FTTP_FIBRE (Monitor IP: 1.1.1.1 / 9.9.9.9, Latency < 50ms) Tier 2 (Failover A): WAN_TELTONIKA_5G (VLAN 10, Dual-SIM EE/Vodafone Roaming) Tier 3 (Failover B): WAN_STARLINK_DC (192.168.100.1 Bypass Mode via Yaosheng PoE) Trigger Level: Packet Loss (>10%) or High Latency (>250ms) • Failback: Hold 120s
Compatible Commercial Hardware Appliances
- [RL-ENT-021] Teltonika RUTX50 Industrial 5G Dual-SIM Continuity Router — Price confirmed at launch
- [RL-ENT-022] YAOSHENG 220W 12V/24V-to-48V DC Starlink PoE Conversion Kit — Price confirmed at launch