What I did last month. Build a vm and install opnsense. Build a base config. If using vlans or multiple interfaces note the order your create them. Backup con

What I did last month. Build a vm and install opnsense. Build a base config. If using vlans or multiple interfaces note the order your create them. Backup config. Install opnsense on your router. Install backup config. Recreate-adding interfaces in order created. And nuts web interface for usb-hids it borked. But it works via ssh. Suricata is a little different. You can get et pro for free with a telemetry agreement. If using vlans only use the physical interface for listening and set the cidr nets in home networks under advanced.