How to Migrate pfSense to OPNsense

Easily migrate pfSense to OPNsense with step-by-step manual setup or script-based automation. Our pfSense support team is always here to help you.

How to Migrate pfsense to OPNsense

Looking to switch from pfSense to OPNsense without losing your configurations or wasting time? You’re in the right place. Although both firewalls share a similar FreeBSD-based core, OPNsense offers a cleaner interface, frequent updates, and enhanced plugin flexibility. This guide walks you through two reliable migration methods:

Method 1: Interface Configuration

First, set up your basic network interfaces.

Step 1: Configure Interfaces

• Access the OPNsense web interface.
• Navigate to Interfaces → Assignments.
• Select a physical interface, enter a description (e.g., “DMZ Network”), then click Add and Save.
• Finally, click Apply Changes.

• Go to Interfaces → Other Types → VLAN.
• Select the parent interface, define the VLAN tag, and enter a description.
• Click Save, then Apply Changes.
• Assign the VLAN just like a physical interface.
• Configure its settings and apply the changes.

2. Firewall Rule Configuration

Next, define firewall rules to control network traffic:

• Navigate to Firewall → Rules.
• Then choose the appropriate interface (e.g., “Guest”).
• Click Add and set the action to Pass.
• Specify the source, destination, and add a rule description.
• Then click Save and Apply Changes.

3. NAT Port Forwarding Configuration

To replicate existing NAT rules from pfSense:

• Go to Firewall → NAT → Port Forward.
• Click Add and select the WAN interface.
• Choose protocol, define destination and port range, then set the redirect target.
• Then enable Add Associated Filter Rule and set it to Pass, if required.
• Afterwards, click Save and Apply Changes

4. WireGuard VPN Configuration

For secure remote access, configure WireGuard VPN:

• Go to System → Firmware → Plugins and install the WireGuard plugin.
• Navigate to VPN → WireGuard.
• Afterwards, click Add, name your instance, and enter details.
• Then, save and Apply the configuration.
• Add peers with access permissions and enable WireGuard.

5. Zenarmor NGFW Setup (Alternative to pfBlockerNG)

If you previously used pfBlockerNG, consider replacing it with Zenarmor:

• Install the third-party repo os-sunnyvalley via System → Firmware → Plugins.
• Then Install the os-sensei plugin.
• Launch the Zenarmor config wizard.
• Then, access the Zenarmor configuration wizard.
• Accept terms and verify hardware compatibility.
• Afterwards choose your reporting database (Elasticsearch, MongoDB, or SQLite).
• Select native or emulated deployment.
• Choose interfaces to protect.
• Activate your license or use free version.
• Configure your policies under the Policies page.

Method 2: Script to Quickly Migrate From pfSense to OPNsense

For those who want to automate the process, this script will do the heavy lifting:

1. Install Python 3.
2. Install dependencies:

python -m pip install --upgrade pip

python -m pip install requests

3. Download this project as .zip or clone it with git clone.
4. Download pfSense config (Diagnostics → Backup & Restore), rename it to pfsense.xml, and place it in the same folder as migrate_pfsense.py.
5. Edit migrate_pfsense.py and define variables:

# user defined variables

firewall_url    = 'https://192.168.1.1'

firewall_user   = 'root'

firewall_passwd = 'password'

6. Run the script:

python migrate_pfsense.py

7. That’s it! Migration is done.

[If needed, Our team is available 24/7 for additional assistance.]

Conclusion

Ultimately, If you’re planning to migrate pfSense to OPNsense, this guide gives you two efficient methods to do so, manually and through scripting. From interfaces to NAT, VPN, and NGFW, every detail is covered to ensure a seamless transition. Migrate pfSense to OPNsense today and enjoy a more modern, community-driven firewall experience.