UPGRADE EVE NG HOW TO
UPGRADE EVE NG ISO
UPGRADE EVE NG PROFESSIONAL
UPGRADE EVE NG SERIES

If youвЂ™ve never used virtualbox or installed OPNsense before, thatвЂ™s ok! Check out the step-by-step guide to doing this over at KifarUnix if you get stuck. IвЂ™ll be doing 2gb RAM, 40gb HD and two network cards (em0 for LAN, em1 for WAN).

UPGRADE EVE NG ISO

Download the latest OPNsense DVD release (21.1 as of this writing) too, you might need 7zip to extract the ISO image if your machine is running Windows.ДЇire up Virtualbox, make a new VM, size it according to their guidelines. If you donвЂ™t already have Virtualbox installed, make sure you have that on your home machine, mine is using version 6.1.18. Go ahead and skip down to step 2 if youвЂ™re already running OPNsense in your homelab. IвЂ™ll now step down from my вЂњsupport the open source communityвЂќ soapbox so we can start getting our hands dirty with OPNsense рџ™‚ Step 1: Initial OPNsense setup in VirtualBox at home Remember that without financial support, all these awesome open-source tools will fade away.

UPGRADE EVE NG PROFESSIONAL

That being said, if youвЂ™re employed as a network or security professional, I strongly recommend buying eve-ng professional and donating to the OPNsense project. The only things you need to supply for building this lab are a credit card to activate the Google Cloud free trial, and something in your homelab capable of running OPNsense! I specifically want todayвЂ™s lab to be as low-cost as possible for all the network engineering students out there.

Some other reason IвЂ™m not thinking about (please let me know if you have one in the comments!)Д®verything will be done with the free community edition of eve-ng.

You have OPNsense/pfSense running at your home and have lots of devices that need to use the tunnel up to GCP.

You want to deep dive into how site-to-site VPN tunnels are setup between a homelab/branch location and GCP.

You want to gain experience setting up GCP VPN Gateway.

You have other instances in GCP that youвЂ™d like a site-to-site tunnel into without running your beefy eve-ng instance.

UPGRADE EVE NG HOW TO

You want to fully automate the setup and teardown of the VPN tunnel using GoogleвЂ™s APIs ( this homelab post covers how to accomplish that in detail).

UPGRADE EVE NG SERIES

If you answer no to all of the following, go ahead and do Tony EвЂ™s eve-ng + ZeroTier YouTube series instead, youвЂ™ll be up and running way faster: If you find yourself answering yes to any of the following questions, you might be better off following this guide. ThereвЂ™s a really good YouTube walkthrough from NetworkCollective covering exactly that, and I would recommend most people follow Tony EвЂ™s GCP eve-ng with ZeroTier instructions in that video instead of all my craziness below in this post.

Instead of re-doing that old blog post, I thought it would be more fun to re-build my whole lab using 100% free network device VMs, no need to buy a Cisco ASA or ASAv to tunnel into your homelab this time! My final topology ends up looking like this, you can skip the Microsoft & Cisco ISE stuff if youвЂ™d like:Дoing the OPNsense VPN directly into Google CloudвЂ™s VPN Gateway is a bit difficult, itвЂ™s actually way easier to use a service like ZeroTier between your Google Cloud eve-ng instance and your homelab.

Most tech blog posts about doing things step-by-step in a public cloud donвЂ™t age well, things change very quickly. Regardless of which network or security products youвЂ™re tinkering with in eve-ng, I hope you try it out on a public cloud sometime, itвЂ™s a real eye-opener as to whatвЂ™s possible with AWS/GCP/Azure these days.

Ever since then, IвЂ™ve sort of turned into an evangelist about how everyone should burn their $300 Google Cloud New Customer Credit on a cloud eve-ng instance if you havenвЂ™t done so already, itвЂ™s really fun! Today IвЂ™ll be rebuilding my GCP eve-ng setup to be more of a вЂњcyber rangeвЂќ I can use to study for the new Cisco ISE Certification Exam. Last year I wrote a long-winded guide on setting up a Cisco ASA site-to-site VPN tunnel into my eve-ng Google Cloud Platform (GCP) instance for my second bedroom homelab. As always, opinions in this post are solely those of my own, and not necessarily those of any organization I am currently affiliated with or have been in the past.

Upgrade eve ng