Skip to content

Interfaces & network

Connectivity > Interfaces & network is one sidebar entry with four tabs:

Tab What it is for
Interfaces & network The ports and every logical interface built on them
Local networks The site's LANs: address, DHCP, way out — see Local networks
DHCP Address pools, reservations and active leases — see DHCP
Internet Which links reach the internet, and in what order — see Internet uplinks and failover

This page covers the first tab.

Port diagram

The diagram at the top draws the physical ports of the device's hardware model:

State Meaning
Active Cable connected, link established
No cable Port is up, no carrier
Down Interface is administratively down

If the diagram does not match the box in front of you, check the Hardware Model in Settings.

Logical Topology

The table lists every interface with Interface, Type, Zone, Status, Addresses and Description. VLANs, PPPoE sessions and bridge members are shown under the interface they sit on.

Zone is the role of the network on that interface: Internet, LAN, Guest, IoT, VoIP, DMZ, Servers or Unassigned.

Badges on a row

Badge Meaning
Detected Present on the device but not managed by this configuration (for example enc0, pflog0, or a VLAN made over the console). Read-only.
Restored Running on the device and part of this configuration, but missing from the version the portal holds — this happens after a rollback. It has been restored from the version that describes it; saving keeps it.
Expected Derived from the hardware model before any device has reported. Lets you configure a device before its hardware arrives; only ports you configure are saved, and all are checked against the real box on first connect.

Adding an interface

Click + Add Interface and choose a type:

Type Description Page
VLAN Tagged virtual LAN VLANs
Bridge Group interfaces together Bridges
PPPoE ISP connection (DSL/Fiber) PPPoE
Trunk Link aggregation (LACP) Trunks
WireGuard VPN tunnel WireGuard
LAN A local network on a spare port, with internet sharing Local networks
IPsec Site-to-site VPN IPsec

Each form has Show equivalent commands, which shows the OpenBSD configuration the device will apply.

Editing a physical port

Click the edit icon on a row. See Physical interfaces.

IP forwarding

The router-mode switch is on the Routing page, under Advanced settings.