How to Connect NordVPN and Isolate VPN Traffic on a Separate AP (Part 1)

I. Create a VLAN and interface

1. Create a VLAN

• Log in to OPNsense and open Interfaces > Other Types > VLAN.
• Click Add.
• Select the LAN port as Parent interface.
• Enter a VLAN tag such as 11, add a description such as VPN, and click Save.

2. Create an interface for the VLAN

• Open Interfaces > Assignments and add an interface. Under New interface, select vlan11 on xxx (VPN).
• The new interface may be named OPT1. Open it, enable it, and configure:

Click Save, then Apply changes.

3. Configure DHCP for VPN_LAN

Open Services ‣ DHCPv4 ‣ VPN_LAN and set:

4. Configure the firewall

Open Firewall ‣ Rules ‣ VPN_LAN.

Allow DNS:

Save the rule.

Allow VPN_LAN Internet access:

Save and apply the changes.