{"id":35566,"date":"2025-12-01T06:01:38","date_gmt":"2025-12-01T03:01:38","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/"},"modified":"2025-12-01T06:01:38","modified_gmt":"2025-12-01T03:01:38","slug":"opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/","title":{"rendered":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi"},"content":{"rendered":"<p><body><\/p>\n<style>\n        \/* Mobil uyumluluk i\u00e7in temel stil \u00f6rnekleri *\/\n        body {\n            font-family: Arial, sans-serif;\n            line-height: 1.6;\n            color: #333;\n            margin: 0 auto;\n            max-width: 1200px;\n            padding: 20px;\n        }\n        h2, h3 {\n            color: #2c3e50;\n            margin-top: 30px;\n        }\n        p {\n            margin-bottom: 1em;\n        }\n        .expert-tip {\n            background-color: #e8f5e9;\n            border-left: 5px solid #4CAF50;\n            padding: 15px;\n            margin: 20px 0;\n            border-radius: 4px;\n            font-style: italic;\n        }\n        pre {\n            background-color: #f4f4f4;\n            padding: 15px;\n            border-radius: 5px;\n            overflow-x: auto;\n        }\n        code {\n            font-family: 'Courier New', monospace;\n            background-color: #eee;\n            padding: 2px 4px;\n            border-radius: 3px;\n        }\n        table {\n            width: 100%;\n            border-collapse: collapse;\n            margin: 20px 0;\n        }\n        th, td {\n            border: 1px solid #ddd;\n            padding: 8px;\n            text-align: left;\n        }\n        th {\n            background-color: #f2f2f2;\n        }<\/p>\n<p>        \/* Responsive tasar\u0131m i\u00e7in medya sorgular\u0131 *\/\n        @media (max-width: 768px) {\n            body {\n                padding: 15px;\n            }\n            h2 {\n                font-size: 1.5em;\n            }\n            h3 {\n                font-size: 1.2em;\n            }\n            table, thead, tbody, th, td, tr {\n                display: block;\n            }\n            thead tr {\n                position: absolute;\n                top: -9999px;\n                left: -9999px;\n            }\n            tr { border: 1px solid #ccc; }\n            td {\n                border: none;\n                border-bottom: 1px solid #eee;\n                position: relative;\n                padding-left: 50%;\n                text-align: right;\n            }\n            td:before {\n                position: absolute;\n                top: 6px;\n                left: 6px;\n                width: 45%;\n                padding-right: 10px;\n                white-space: nowrap;\n                text-align: left;\n                font-weight: bold;\n            }\n            \/* Tablo ba\u015fl\u0131klar\u0131n\u0131 td:before i\u00e7ine yerle\u015ftirin *\/\n            td:nth-of-type(1):before { content: \"Parametre\"; }\n            td:nth-of-type(2):before { content: \"A\u00e7\u0131klama\"; }\n        }\n        @media (max-width: 480px) {\n            body {\n                padding: 10px;\n            }\n        }\n    <\/style>\n<p>A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.<\/p>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn dijital \u00e7a\u011f\u0131nda, i\u015fletmelerden ev kullan\u0131c\u0131lar\u0131na kadar herkesin kesintisiz ve y\u00fcksek performansl\u0131 a\u011flara ihtiyac\u0131 var. Peki, a\u011f\u0131n\u0131zda bir ba\u011flant\u0131 koptu\u011funda veya yo\u011fun trafik alt\u0131nda darbo\u011faz olu\u015ftu\u011funda ne olur? \u0130\u015fte tam da bu noktada LAGG (Link Aggregation Group) veya end\u00fcstri standard\u0131 ad\u0131yla LACP (Link Aggregation Control Protocol) devreye giriyor. LAGG, birden fazla fiziksel a\u011f ba\u011flant\u0131s\u0131n\u0131 tek bir mant\u0131ksal ba\u011flant\u0131 gibi birle\u015ftirmenize olanak tan\u0131r. Bu sayede, bant geni\u015fli\u011fini art\u0131rabilir, a\u011fdaki y\u00fck\u00fc dengeleyebilir ve bir ba\u011flant\u0131n\u0131n kesilmesi durumunda otomatik olarak di\u011fer ba\u011flant\u0131lara ge\u00e7i\u015f yaparak kesintisizli\u011fi garantileyebilirsiniz. Dolay\u0131s\u0131yla, LACP teknolojisi a\u011f\u0131n\u0131z\u0131n dayan\u0131kl\u0131l\u0131\u011f\u0131n\u0131 ve h\u0131z\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131r\u0131r. \u00c7ok daha g\u00fcvenilir bir a\u011f mimarisi in\u015fa etmenizi sa\u011flar.<\/p>\n<p>\u015eeffaf k\u00f6pr\u00fc (Transparent Bridge) ise a\u011f trafi\u011fini filtrelemeden veya y\u00f6nlendirmeden, sadece fiziksel portlar aras\u0131nda ileten bir yap\u0131d\u0131r. Bir k\u00f6pr\u00fc, OSI modelinin 2. katman\u0131nda (Veri Ba\u011flant\u0131 Katman\u0131) \u00e7al\u0131\u015f\u0131r ve MAC adreslerine g\u00f6re trafi\u011fi iletir. &#8220;\u015eeffaf&#8221; olmas\u0131n\u0131n nedeni, a\u011fdaki cihazlar\u0131n k\u00f6pr\u00fcn\u00fcn varl\u0131\u011f\u0131n\u0131 fark etmemesidir; t\u0131pk\u0131 tek bir a\u011f kablosu kullan\u0131l\u0131yormu\u015f gibi davran\u0131r. OPNsense gibi g\u00fc\u00e7l\u00fc bir g\u00fcvenlik duvar\u0131 ve y\u00f6nlendirici yaz\u0131l\u0131m\u0131n\u0131n, UniFi a\u011f\u0131 ile UDM aras\u0131nda \u015feffaf bir LAGG k\u00f6pr\u00fcs\u00fc olarak konumland\u0131r\u0131lmas\u0131, a\u011f\u0131n\u0131z\u0131n temel topolojisini de\u011fi\u015ftirmeden geli\u015fmi\u015f g\u00fcvenlik ve trafik denetimi yetenekleri eklemenizi sa\u011flar. Bu sayede, UDM&#8217;nin a\u011f y\u00f6netimi kolayl\u0131\u011f\u0131n\u0131 korurken, OPNsense&#8217;in sundu\u011fu derinlemesine paket denetimi, VPN sunucular\u0131, IDS\/IPS gibi \u00f6zelliklerden faydalanabilirsiniz. Bu yap\u0131land\u0131rma, \u00f6zellikle UniFi ekosisteminde derinlemesine g\u00fcvenlik ve esneklik arayan profesyoneller i\u00e7in vazge\u00e7ilmez bir \u00e7\u00f6z\u00fcm sunar. \u00d6rne\u011fin, bir okul veya k\u00fc\u00e7\u00fck bir i\u015fletme a\u011f\u0131nda, \u00f6\u011frenci ve \u00f6\u011fretmen trafi\u011fini ayr\u0131\u015ft\u0131rmak, misafir a\u011flar\u0131na g\u00fcvenlik politikalar\u0131 uygulamak veya belirli uygulamalar i\u00e7in bant geni\u015fli\u011fi \u00f6nceliklendirmek gibi senaryolarda bu \u015feffaf k\u00f6pr\u00fcleme olduk\u00e7a etkilidir. Dolay\u0131s\u0131yla, LAGG ve \u015feffaf k\u00f6pr\u00fc kavramlar\u0131n\u0131 iyi anlamak, modern a\u011f altyap\u0131lar\u0131n\u0131 kurarken at\u0131lacak en \u00f6nemli ad\u0131mlardan biridir.<\/p>\n<p>\u015eimdi bu kavramlar\u0131 daha derinlemesine inceleyelim:<\/p>\n<ul>\n<li><strong>LAGG\/LACP:<\/strong> Birden fazla Ethernet ba\u011flant\u0131s\u0131n\u0131 tek bir mant\u0131ksal ba\u011flant\u0131 halinde birle\u015ftiren bir protokold\u00fcr. Temel faydalar\u0131 aras\u0131nda bant geni\u015fli\u011fi art\u0131\u015f\u0131, y\u00fck dengeleme (load balancing) ve ba\u011flant\u0131 yedeklili\u011fi (failover) bulunur. \u00d6rne\u011fin, iki adet 1 Gbps ba\u011flant\u0131y\u0131 LAGG ile birle\u015ftirdi\u011finizde, tek bir cihazdan 2 Gbps h\u0131za ula\u015famayabilirsiniz (\u00e7\u00fcnk\u00fc bu genellikle tek bir TCP ak\u0131\u015f\u0131 i\u00e7in ge\u00e7erli de\u011fildir), ancak birden fazla cihaz veya birden fazla e\u015fzamanl\u0131 ak\u0131\u015f i\u00e7in toplamda 2 Gbps&#8217;ye kadar bant geni\u015fli\u011fi elde edersiniz. En \u00f6nemlisi, ba\u011flant\u0131lardan biri kesildi\u011finde a\u011f\u0131n\u0131z \u00e7al\u0131\u015fmaya devam eder.<\/li>\n<li><strong>\u015eeffaf K\u00f6pr\u00fc:<\/strong> Bir a\u011f k\u00f6pr\u00fcs\u00fc, iki veya daha fazla a\u011f segmentini birbirine ba\u011flayan ve paketleri MAC adreslerine g\u00f6re ileten bir cihazd\u0131r. \u015eeffaf k\u00f6pr\u00fcleme, k\u00f6pr\u00fcn\u00fcn a\u011fdaki di\u011fer cihazlara kendini tan\u0131tmad\u0131\u011f\u0131 anlam\u0131na gelir. Cihazlar, k\u00f6pr\u00fcy\u00fc kendileri ile hedef aras\u0131nda pasif bir ge\u00e7i\u015f olarak alg\u0131lar. Bu durum, mevcut IP adresleme \u015femalar\u0131n\u0131z\u0131 veya a\u011f topolojinizi de\u011fi\u015ftirmeden yeni bir cihaz eklemek istedi\u011finizde \u00e7ok avantajl\u0131d\u0131r. \u00d6zellikle OPNsense gibi bir g\u00fcvenlik duvar\u0131n\u0131 mevcut bir a\u011f\u0131n ortas\u0131na entegre etmek istedi\u011finizde, a\u011f adreslemesini yeniden yap\u0131land\u0131rmak yerine \u015feffaf bir k\u00f6pr\u00fc olarak \u00e7al\u0131\u015fmas\u0131 b\u00fcy\u00fck kolayl\u0131k sa\u011flar. Bu mimaride OPNsense, paketleri filtreler, denetler ve g\u00fcvenlik politikalar\u0131n\u0131 uygular, ancak IP adreslerini de\u011fi\u015ftirmez veya NAT yapmaz.<\/li>\n<\/ul>\n<div class=\"expert-tip\">\n        Uzman \u0130pucu: LAGG\/LACP kurulumunda, her iki taraftaki (\u00f6rne\u011fin OPNsense ve UniFi Switch) portlar\u0131n LACP modunda yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun. Pasif veya statik modlar, baz\u0131 durumlarda \u00e7al\u0131\u015fsa da, dinamik LACP genellikle en iyi uyumlulu\u011fu ve y\u00f6netimi sunar.\n    <\/div>\n<h2>A\u011f\u0131n\u0131zda Neden OPNsense, UDM ve UniFi Entegrasyonu D\u00fc\u015f\u00fcnmelisiniz?<\/h2>\n<p>A\u011f altyap\u0131n\u0131z\u0131 kurarken veya geli\u015ftirirken, farkl\u0131 markalar\u0131n ve platformlar\u0131n sundu\u011fu avantajlar\u0131 bir araya getirmek, genellikle en esnek ve g\u00fc\u00e7l\u00fc \u00e7\u00f6z\u00fcm\u00fc ortaya \u00e7\u0131kar\u0131r. OPNsense, UniFi Dream Machine (UDM) ve UniFi anahtarlar\u0131 aras\u0131ndaki entegrasyon, bu felsefenin m\u00fckemmel bir \u00f6rne\u011fidir. Her bir bile\u015fen, a\u011f\u0131n\u0131z\u0131n farkl\u0131 bir katman\u0131na g\u00fc\u00e7l\u00fc yetenekler sunar ve do\u011fru \u015fekilde birle\u015ftirildi\u011finde, hem g\u00fcvenli hem de y\u00fcksek performansl\u0131 bir a\u011f olu\u015fturur.<\/p>\n<h3>OPNsense Neden Bu Yap\u0131da Olmazsa Olmaz?<\/h3>\n<p>OPNsense, a\u00e7\u0131k kaynakl\u0131, g\u00fc\u00e7l\u00fc bir g\u00fcvenlik duvar\u0131 ve y\u00f6nlendirici platformudur. FortiGate, Palo Alto gibi ticari \u00e7\u00f6z\u00fcmlerin sundu\u011fu bir\u00e7ok ileri seviye \u00f6zelli\u011fi \u00fccretsiz olarak sunar. \u0130\u00e7inde bulunan IPS\/IDS (Intrusion Prevention\/Detection System), VPN sunucular\u0131 (OpenVPN, WireGuard, IPsec), web filtreleme, trafik \u015fekillendirme (traffic shaping) ve geli\u015fmi\u015f y\u00f6nlendirme protokolleri gibi \u00f6zellikler, a\u011f\u0131n\u0131z i\u00e7in kapsaml\u0131 bir g\u00fcvenlik ve y\u00f6netim katman\u0131 sa\u011flar. Bu yap\u0131da OPNsense&#8217;i \u015feffaf bir LAGG k\u00f6pr\u00fcs\u00fc olarak konumland\u0131rmak, UniFi ekosisteminin basitle\u015ftirilmi\u015f a\u011f y\u00f6netimine m\u00fcdahale etmeden, derinlemesine g\u00fcvenlik politikalar\u0131 uygulaman\u0131za olanak tan\u0131r. \u00d6zellikle UDM&#8217;nin g\u00fcvenlik yeteneklerinin \u00f6tesine ge\u00e7mek istedi\u011finizde, \u00f6rne\u011fin belirli tehdit imzalar\u0131n\u0131 engellemek, \u00fclke baz\u0131nda trafi\u011fi k\u0131s\u0131tlamak veya \u00f6zelle\u015ftirilmi\u015f VPN t\u00fcnelleri kurmak istedi\u011finizde OPNsense devreye girer. Ayr\u0131ca, OPNsense&#8217;in raporlama ve izleme ara\u00e7lar\u0131, a\u011f trafi\u011finiz hakk\u0131nda detayl\u0131 g\u00f6r\u00fcn\u00fcrl\u00fck sa\u011flayarak sorun gidermeyi ve performans\u0131 optimize etmeyi kolayla\u015ft\u0131r\u0131r. \u00d6rne\u011fin, bir kurumda veri s\u0131z\u0131nt\u0131lar\u0131n\u0131 engellemek veya d\u0131\u015far\u0131dan gelen sald\u0131r\u0131lar\u0131 proaktif olarak durdurmak i\u00e7in OPNsense&#8217;in IPS\/IDS yetenekleri paha bi\u00e7ilmezdir. Bu \u00f6zellikler, UDM&#8217;nin sundu\u011fu temel g\u00fcvenlik katman\u0131n\u0131 \u00e7ok daha ileriye ta\u015f\u0131r.<\/p>\n<h3>UniFi Dream Machine (UDM) ve UniFi Anahtarlar\u0131n\u0131n Rol\u00fc Nedir?<\/h3>\n<p>UniFi Dream Machine (UDM), Ubiquiti&#8217;nin a\u011f\u0131n\u0131z\u0131 basitle\u015ftirmek ve y\u00f6netmek i\u00e7in tasarlanm\u0131\u015f hepsi bir arada bir \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. Kendi i\u00e7inde bir UniFi Controller, g\u00fcvenlik duvar\u0131, y\u00f6nlendirici ve bir anahtar (switch) bar\u0131nd\u0131r\u0131r. UniFi ekosistemi, kolay kurulumu, merkezi y\u00f6netimi ve estetik aray\u00fcz\u00fc ile bilinir. UniFi anahtarlar\u0131 ise VLAN deste\u011fi, PoE (Power over Ethernet) yetenekleri ve UniFi Controller \u00fczerinden kolay yap\u0131land\u0131rma gibi \u00f6zellikler sunar. Bu entegrasyonda UDM ve UniFi anahtarlar\u0131n\u0131n rol\u00fc, a\u011f\u0131n fiziksel katman\u0131n\u0131 ve temel IP y\u00f6nlendirmesini sa\u011flamakt\u0131r. UDM, WAN ba\u011flant\u0131s\u0131n\u0131 y\u00f6netir, DHCP hizmeti verir ve Wi-Fi a\u011flar\u0131n\u0131 kontrol eder. UniFi anahtarlar ise UDM ile u\u00e7 cihazlar (bilgisayarlar, eri\u015fim noktalar\u0131 vb.) aras\u0131nda y\u00fcksek h\u0131zl\u0131 ba\u011flant\u0131lar sa\u011flar. LAGG k\u00f6pr\u00fcs\u00fc, bu bile\u015fenlerin aras\u0131na kusursuz bir \u015fekilde entegre olur. UDM&#8217;nin kendi Layer 3 (IP Katman\u0131) yeteneklerini kullanmaya devam ederken, Layer 2 (MAC Katman\u0131) seviyesinde OPNsense&#8217;in g\u00fcvenlik yeteneklerinden faydalanman\u0131za olanak tan\u0131r. Bu sayede, UniFi&#8217;nin kullan\u0131c\u0131 dostu aray\u00fcz\u00fcn\u00fc terk etmeden, OPNsense&#8217;in sundu\u011fu ileri d\u00fczey \u00f6zellikleri a\u011f\u0131n\u0131za dahil edebilirsiniz. \u00d6rne\u011fin, bir otel veya kafe ortam\u0131nda, misafir a\u011f\u0131n\u0131 tamamen izole edip OPNsense \u00fczerinden \u00f6zel g\u00fcvenlik politikalar\u0131 uygularken, UniFi&#8217;nin merkezi Wi-Fi y\u00f6netiminden \u00f6d\u00fcn vermemek harika bir avantajd\u0131r.<\/p>\n<p>\u00d6zetle, bu \u00fc\u00e7l\u00fc entegrasyon, bir yandan UniFi&#8217;nin kullan\u0131m kolayl\u0131\u011f\u0131 ve b\u00fct\u00fcnle\u015fik y\u00f6netimini sa\u011flarken, di\u011fer yandan OPNsense&#8217;in rakipsiz g\u00fcvenlik ve esneklik \u00f6zelliklerini a\u011f\u0131n\u0131za ta\u015f\u0131r. A\u011f\u0131n\u0131zdaki t\u00fcm trafi\u011fi, ana UDM y\u00f6nlendirmesini bozmadan, OPNsense \u00fczerinden g\u00fcvenli bir \u015fekilde ge\u00e7irebilirsiniz. Bu, \u00f6zellikle hassas verilerin i\u015flendi\u011fi ortamlar veya y\u00fcksek g\u00fcvenlik beklentisi olan senaryolar i\u00e7in ideal bir yap\u0131d\u0131r.<\/p>\n<h2>Ad\u0131m Ad\u0131m Kurulum Rehberi: OPNsense&#8217;de LAGG ve \u015eeffaf K\u00f6pr\u00fc Nas\u0131l Yap\u0131land\u0131r\u0131l\u0131r?<\/h2>\n<p>Bu b\u00f6l\u00fcmde, OPNsense g\u00fcvenlik duvar\u0131n\u0131zda LAGG (LACP) aray\u00fcz\u00fcn\u00fc olu\u015fturacak ve bunu \u015feffaf bir k\u00f6pr\u00fc haline getirerek UniFi ve UDM a\u011f\u0131n\u0131zla entegre etme ad\u0131mlar\u0131n\u0131 detayl\u0131ca inceleyece\u011fiz. Bu s\u00fcre\u00e7, a\u011f topolojinizi geli\u015ftirmek isteyen herkes i\u00e7in kritik bir ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r.<\/p>\n<h3>1. OPNsense Donan\u0131m Haz\u0131rl\u0131\u011f\u0131 ve A\u011f Topolojisi<\/h3>\n<p>\u00d6ncelikle, OPNsense \u00e7al\u0131\u015ft\u0131raca\u011f\u0131n\u0131z donan\u0131m\u0131n en az d\u00f6rt adet Gigabit Ethernet portuna sahip olmas\u0131 gerekti\u011fini belirtelim. \u0130ki port LAGG i\u00e7in, iki port ise UDM ve UniFi Switch ile ba\u011flant\u0131 i\u00e7in kullan\u0131lacak. LAGG yap\u0131s\u0131n\u0131 daha verimli kullanabilmek ad\u0131na, UDM Pro veya UniFi Switch Pro gibi cihazlar\u0131n 10 Gbps SFP+ portlar\u0131 \u00fczerinden LACP desteklemesi, bu kurulumda size ciddi performans art\u0131\u015f\u0131 sa\u011flayacakt\u0131r. Temel a\u011f topolojimiz \u015fu \u015fekilde olacak:<\/p>\n<ul>\n<li><strong>UDM (LAN Portu) <--> OPNsense (LAGG Portu Aray\u00fcz 1)<\/strong><\/li>\n<li><strong>UniFi Switch (Uplink Portu) <--> OPNsense (LAGG Portu Aray\u00fcz 2)<\/strong><\/li>\n<li>Bu iki ba\u011flant\u0131 OPNsense \u00fczerinde tek bir LAGG aray\u00fcz\u00fc olarak birle\u015fecek ve daha sonra bir k\u00f6pr\u00fcye dahil edilecek.<\/li>\n<\/ul>\n<p>Bu yap\u0131da, UDM&#8217;nin LAN portundan \u00e7\u0131kan t\u00fcm trafik, fiziksel olarak OPNsense&#8217;e ula\u015facak ve OPNsense&#8217;in \u015feffaf k\u00f6pr\u00fcs\u00fc \u00fczerinden ge\u00e7erek UniFi Switch&#8217;e y\u00f6nlendirilecek. B\u00f6ylece t\u00fcm i\u00e7 a\u011f trafi\u011finiz OPNsense \u00fczerinden ge\u00e7irilerek denetlenecek.<\/p>\n<h3>2. OPNsense \u00dczerinde LAGG Aray\u00fcz\u00fc Olu\u015fturma<\/h3>\n<p>OPNsense aray\u00fcz\u00fcne giri\u015f yap\u0131n ve \u015fu ad\u0131mlar\u0131 takip edin:<\/p>\n<ol>\n<li><strong>Aray\u00fczler > Atamalar > LAGG<\/strong> sekmesine gidin.<\/li>\n<li><code>+ Ekle<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<li><strong>Parent Interface(s)<\/strong> k\u0131sm\u0131nda, LAGG grubuna dahil etmek istedi\u011finiz fiziksel Ethernet portlar\u0131n\u0131 (\u00f6rn. <code>igb1<\/code>, <code>igb2<\/code>) se\u00e7in. En az iki port se\u00e7meniz gerekmektedir.<\/li>\n<li><strong>Protocol<\/strong> olarak <code>LACP<\/code>&#8216;yi se\u00e7in. Bu, dinamik ba\u011flant\u0131 anla\u015fmas\u0131 sa\u011flar.<\/li>\n<li><strong>Description<\/strong> alan\u0131na a\u00e7\u0131klay\u0131c\u0131 bir isim girin (\u00f6rn. <code>LAGG_UDM_UNIFI<\/code>).<\/li>\n<li><code>Kaydet<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<\/ol>\n<p>Bu ad\u0131m tamamland\u0131\u011f\u0131nda, OPNsense, se\u00e7ti\u011finiz fiziksel portlar\u0131 tek bir mant\u0131ksal LAGG aray\u00fcz\u00fc alt\u0131nda toplayacakt\u0131r. Art\u0131k bu LAGG aray\u00fcz\u00fcn\u00fc di\u011fer a\u011f yap\u0131land\u0131rmalar\u0131nda kullanabiliriz.<\/p>\n<pre><code class=\"language-bash\">\n# OPNsense CLI'dan LAGG durumunu kontrol etmek i\u00e7in:\nifconfig lagg0\n    <\/pre>\n<p><\/code><\/p>\n<p>Yukar\u0131daki komutu kullanarak LAGG aray\u00fcz\u00fcn\u00fcz\u00fcn durumunu ve \u00fcye portlar\u0131n\u0131 kontrol edebilirsiniz. Her \u015fey yolundaysa, portlar\u0131n \"active\" oldu\u011funu g\u00f6receksiniz.<\/p>\n<h3>3. \u015eeffaf K\u00f6pr\u00fc Olu\u015fturma<\/h3>\n<p>\u015eimdi OPNsense'in LAGG aray\u00fcz\u00fcn\u00fc bir k\u00f6pr\u00fcye dahil edelim. Bu k\u00f6pr\u00fc, OPNsense'in t\u00fcm trafi\u011fi y\u00f6nlendirme yerine iletmesini sa\u011flayacak.<\/p>\n<ol>\n<li><strong>Aray\u00fczler > Atamalar > K\u00f6pr\u00fc<\/strong> sekmesine gidin.<\/li>\n<li><code>+ Ekle<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<li><strong>\u00dcye Aray\u00fczler (Member Interfaces)<\/strong> k\u0131sm\u0131na yeni olu\u015fturdu\u011funuz LAGG aray\u00fcz\u00fcn\u00fc (<code>LAGG_UDM_UNIFI<\/code>) ve a\u011f\u0131n\u0131z\u0131n WAN taraf\u0131na ba\u011fl\u0131 olmayan di\u011fer bir fiziksel aray\u00fcz\u00fc (\u00f6rn. <code>igb0<\/code> veya <code>WAN<\/code> olarak yap\u0131land\u0131r\u0131lmam\u0131\u015f ba\u015fka bir port) ekleyin. <strong>\u00d6nemli:<\/strong> K\u00f6pr\u00fcye ekledi\u011finiz fiziksel aray\u00fczlerin (LAGG ve di\u011fer ethernet portu) \"Atamalar\" k\u0131sm\u0131nda aktif ve yap\u0131land\u0131r\u0131lm\u0131\u015f olmas\u0131 gerekir, ancak IP adresi atanmam\u0131\u015f olmal\u0131d\u0131r. Sadece \"Enable\" se\u00e7ene\u011fi i\u015faretli olmal\u0131.<\/li>\n<li><strong>A\u00e7\u0131klama<\/strong> alan\u0131na a\u00e7\u0131klay\u0131c\u0131 bir isim girin (\u00f6rn. <code>BRIDGE_LAN_LAGG<\/code>).<\/li>\n<li><code>Kaydet<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<\/ol>\n<p>Bu i\u015flemden sonra, olu\u015fturdu\u011funuz k\u00f6pr\u00fc aray\u00fcz\u00fcn\u00fc aktifle\u015ftirmeniz gerekecek. <strong>Aray\u00fczler > [BRIDGE_LAN_LAGG]<\/strong> (olu\u015fturdu\u011funuz k\u00f6pr\u00fcn\u00fcn ismi) men\u00fcs\u00fcne gidin ve <code>Aray\u00fcz\u00fc Etkinle\u015ftir<\/code> kutucu\u011funu i\u015faretleyin. Bu aray\u00fcze herhangi bir IP adresi atamay\u0131n, \u00e7\u00fcnk\u00fc amac\u0131m\u0131z \u015feffaf bir k\u00f6pr\u00fc olu\u015fturmakt\u0131r. Kaydedip de\u011fi\u015fiklikleri uygulay\u0131n.<\/p>\n<div class=\"expert-tip\">\n        Uzman \u0130pucu: \u015eeffaf k\u00f6pr\u00fc modunda OPNsense'e eri\u015fim sa\u011flayabilmek i\u00e7in k\u00f6pr\u00fcye bir y\u00f6netim IP adresi atayabilirsiniz. Bunu, k\u00f6pr\u00fc aray\u00fcz\u00fc ayarlar\u0131nda \"IPv4 Yap\u0131land\u0131rma T\u00fcr\u00fc\"n\u00fc \"Statik IPv4\" olarak se\u00e7ip, mevcut a\u011f\u0131n\u0131zdan uygun bir IP adresi vererek yapabilirsiniz. Ancak bu sadece y\u00f6netim eri\u015fimi i\u00e7indir, trafik y\u00f6nlendirmesi i\u00e7in de\u011fildir.\n    <\/div>\n<h3>4. G\u00fcvenlik Duvar\u0131 Kurallar\u0131 ve UniFi Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>OPNsense k\u00f6pr\u00fc modunda olsa bile, g\u00fcvenlik duvar\u0131 kurallar\u0131 hala ge\u00e7erlidir. Varsay\u0131lan olarak, k\u00f6pr\u00fcdeki t\u00fcm trafi\u011fe izin veren kurallar\u0131 olu\u015fturman\u0131z gerekebilir. Aksi takdirde, a\u011f trafi\u011finiz engellenebilir.<\/p>\n<ol>\n<li><strong>G\u00fcvenlik Duvar\u0131 > Kurallar > BRIDGE_LAN_LAGG<\/strong> sekmesine gidin.<\/li>\n<li>T\u00fcm trafi\u011fe izin veren bir kural olu\u015fturmak i\u00e7in <code>+ Ekle<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<li><strong>Eylem:<\/strong> <code>\u0130zin Ver (Pass)<\/code><\/li>\n<li><strong>Aray\u00fcz:<\/strong> <code>BRIDGE_LAN_LAGG<\/code><\/li>\n<li><strong>Kaynak:<\/strong> <code>Herhangi biri (Any)<\/code><\/li>\n<li><strong>Hedef:<\/strong> <code>Herhangi biri (Any)<\/code><\/li>\n<li><strong>Protokol:<\/strong> <code>Herhangi biri (Any)<\/code><\/li>\n<li><code>Kaydet<\/code> butonuna t\u0131klay\u0131n ve de\u011fi\u015fiklikleri uygulay\u0131n.<\/ol>\n<p>Bu kural, k\u00f6pr\u00fc \u00fczerindeki t\u00fcm trafi\u011fin ge\u00e7mesine izin verir. \u0130lerleyen a\u015famalarda bu kurallar\u0131 \u00f6zelle\u015ftirerek belirli trafik t\u00fcrlerini engelleyebilir veya izin verebilirsiniz. \u015eimdi UniFi taraf\u0131na ge\u00e7elim.<\/p>\n<p><strong>UniFi Dream Machine (UDM) \/ UniFi Switch Yap\u0131land\u0131rmas\u0131:<\/strong><\/p>\n<ol>\n<li>UniFi Controller aray\u00fcz\u00fcne giri\u015f yap\u0131n.<\/li>\n<li><strong>Cihazlar (Devices)<\/strong> b\u00f6l\u00fcm\u00fcne gidin ve LAGG'ye dahil etmek istedi\u011finiz UniFi Switch veya UDM Pro cihaz\u0131n\u0131 se\u00e7in.<\/li>\n<li><strong>Portlar (Ports)<\/strong> sekmesine gidin.<\/li>\n<li>LAGG i\u00e7in kullanaca\u011f\u0131n\u0131z portlar\u0131 se\u00e7in (\u00f6rn. UDM'nin LAN portu ve UniFi Switch'in uplink portu).<\/li>\n<li>Bu portlar\u0131 LACP (Link Aggregation Control Protocol) modunda yap\u0131land\u0131r\u0131n. Genellikle \"Aggregation\" veya \"LAG\" se\u00e7enekleri alt\u0131nda bulabilirsiniz. Port profilini \"Aggregation\" olarak ayarlay\u0131n ve \u00fcye portlar\u0131 se\u00e7in.\n<pre><code class=\"language-json\">\n\/\/ UniFi Controller CLI veya geli\u015fmi\u015f ayarlar\u0131ndan bir LACP port grubu olu\u015fturma \u00f6rne\u011fi (GUI'den yap\u0131l\u0131r)\n{\n    \"port_override\": [\n        {\n            \"port_idx\": 1, \/\/ UDM'nin LAGG i\u00e7in kullan\u0131lacak ilk portu\n            \"name\": \"LAGG_OPNsense_1\",\n            \"aggregation\": true,\n            \"aggregate_idx\": 1, \/\/ Ayn\u0131 aggregate_idx'i kullanarak grubu olu\u015fturun\n            \"poe_mode\": \"off\",\n            \"autoneg\": true\n        },\n        {\n            \"port_idx\": 2, \/\/ UDM'nin LAGG i\u00e7in kullan\u0131lacak ikinci portu\n            \"name\": \"LAGG_OPNsense_2\",\n            \"aggregation\": true,\n            \"aggregate_idx\": 1,\n            \"poe_mode\": \"off\",\n            \"autoneg\": true\n        }\n    ]\n}\n            <\/pre>\n<p><\/code><\/p>\n<p>Yukar\u0131daki JSON yap\u0131s\u0131, UniFi'nin CLI veya yap\u0131land\u0131rma dosyalar\u0131nda LAGG olu\u015fturmak i\u00e7in kullan\u0131lan mant\u0131\u011f\u0131 temsil etmektedir. Normalde bu i\u015flemi UniFi Controller'\u0131n GUI'sinden, ilgili switch'in port ayarlar\u0131 alt\u0131nda \"Aggregate\" se\u00e7ene\u011fini kullanarak kolayca yapabilirsiniz. \u0130ki portu se\u00e7ip \"Aggregate\" tu\u015funa bast\u0131\u011f\u0131n\u0131zda otomatik olarak LACP grubunu olu\u015fturacakt\u0131r.<\/p>\n<\/li>\n<li>Ayarlar\u0131 kaydedin ve cihazlar\u0131n yeniden ba\u015flat\u0131lmas\u0131n\u0131 bekleyin.<\/li>\n<\/ol>\n<p>Bu ad\u0131mlarla, hem OPNsense hem de UniFi taraf\u0131nda LAGG yap\u0131land\u0131rmas\u0131 tamamlanm\u0131\u015f olmal\u0131d\u0131r. Ba\u011flant\u0131lar kuruldu\u011funda, LAGG aray\u00fcz\u00fc devreye girecek ve a\u011f trafi\u011finiz OPNsense \u00fczerinden ge\u00e7meye ba\u015flayacakt\u0131r. Bu a\u015famada, a\u011f\u0131n\u0131z\u0131n \u015feffaf bir LAGG k\u00f6pr\u00fcs\u00fc \u00fczerinden \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in ping testleri ve trafik izleme ara\u00e7lar\u0131n\u0131 kullanabilirsiniz.<\/p>\n<h2>Geli\u015fmi\u015f Yap\u0131land\u0131rmalar ve \u0130pu\u00e7lar\u0131: Performans, G\u00fcvenlik ve VLAN Entegrasyonu<\/h2>\n<p>Temel LAGG ve \u015feffaf k\u00f6pr\u00fc kurulumunu tamamlad\u0131\u011f\u0131n\u0131za g\u00f6re, art\u0131k bu yap\u0131y\u0131 daha da optimize etmek ve a\u011f\u0131n\u0131zdan en iyi \u015fekilde yararlanmak i\u00e7in geli\u015fmi\u015f yap\u0131land\u0131rmalara ve ipu\u00e7lar\u0131na g\u00f6z atabiliriz. Bu b\u00f6l\u00fcmde, performans\u0131 art\u0131rma, g\u00fcvenli\u011fi s\u0131k\u0131la\u015ft\u0131rma ve VLAN'lar\u0131 bu karma yap\u0131ya nas\u0131l entegre edece\u011finizi ele alaca\u011f\u0131z.<\/p>\n<h3>LAGG Performans\u0131n\u0131 Optimize Etme<\/h3>\n<p>LAGG, bant geni\u015fli\u011fini art\u0131r\u0131rken ayn\u0131 zamanda y\u00fck dengeleme sa\u011flar. Ancak y\u00fck dengeleme algoritmas\u0131, performans\u0131 do\u011frudan etkileyebilir. OPNsense'de LAGG'nin varsay\u0131lan da\u011f\u0131t\u0131m modu (hashing algorithm), genellikle kaynak ve hedef MAC adreslerine dayan\u0131r. Ancak daha geli\u015fmi\u015f algoritmalarla performans\u0131 daha da art\u0131rabilirsiniz:<\/p>\n<ul>\n<li><strong>Kaynak\/Hedef IP Adresi (IP Hashing):<\/strong> Birden fazla farkl\u0131 IP adresine sahip istemcileriniz varsa, IP adreslerine g\u00f6re y\u00fck dengeleme daha verimli olabilir. Bu, tek bir TCP ak\u0131\u015f\u0131n\u0131n hala tek bir ba\u011flant\u0131 \u00fczerinden gitmesine neden olsa da, farkl\u0131 istemcilerin farkl\u0131 ba\u011flant\u0131lar\u0131 kullanmas\u0131n\u0131 sa\u011flayarak genel throughput'u art\u0131r\u0131r.<\/li>\n<li><strong>Kaynak\/Hedef IP ve Port (IP-Port Hashing):<\/strong> En gran\u00fcler y\u00fck dengeleme y\u00f6ntemlerinden biridir. Bu y\u00f6ntem, ayn\u0131 kaynak ve hedef IP adreslerine sahip farkl\u0131 port numaralar\u0131na sahip ak\u0131\u015flar\u0131 bile farkl\u0131 fiziksel ba\u011flant\u0131lara da\u011f\u0131tabilir. Bu, \u00f6zellikle ayn\u0131 sunucuya eri\u015fen birden \u00e7ok istemci veya ayn\u0131 istemciden farkl\u0131 sunuculara giden birden \u00e7ok e\u015fzamanl\u0131 ba\u011flant\u0131 oldu\u011funda faydal\u0131d\u0131r.<\/li>\n<\/ul>\n<p>OPNsense'de LAGG ayarlar\u0131n\u0131z\u0131 (<strong>Aray\u00fczler > Atamalar > LAGG > D\u00fczenle<\/strong>) ziyaret ederek \"Hashing Algorithm\" se\u00e7ene\u011fini g\u00f6zden ge\u00e7irin. A\u011f\u0131n\u0131z\u0131n trafik profiline en uygun olan\u0131 se\u00e7mek, performans\u0131 maksimize etmenize yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n<div class=\"expert-tip\">\n        Uzman \u0130pucu: LAGG performans\u0131n\u0131 test ederken iperf3 gibi ara\u00e7lar kullan\u0131n. Tek bir ak\u0131\u015f\u0131n h\u0131z\u0131n\u0131 \u00f6l\u00e7mek yerine, birden \u00e7ok e\u015fzamanl\u0131 ak\u0131\u015f\u0131 test ederek LAGG'nin ger\u00e7ek y\u00fck dengeleme yeteneklerini daha iyi anlayabilirsiniz.\n    <\/div>\n<h3>VLAN'lar\u0131n LAGG K\u00f6pr\u00fc \u00dczerinden Entegrasyonu<\/h3>\n<p>Modern a\u011flarda VLAN'lar (Sanal Yerel Alan A\u011flar\u0131) trafi\u011fi mant\u0131ksal olarak b\u00f6lmek i\u00e7in vazge\u00e7ilmezdir. LAGG k\u00f6pr\u00fcs\u00fc \u00fczerinden VLAN'lar\u0131 sorunsuz bir \u015fekilde ge\u00e7irmek, a\u011f\u0131n\u0131z\u0131n esnekli\u011fini art\u0131r\u0131r. OPNsense \u015feffaf k\u00f6pr\u00fc olarak \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in, UniFi Controller'da tan\u0131mlad\u0131\u011f\u0131n\u0131z VLAN'lar otomatik olarak OPNsense'den ge\u00e7er. Ancak, OPNsense'in belirli VLAN'lar i\u00e7in g\u00fcvenlik politikalar\u0131 uygulamas\u0131 veya o VLAN'da bir aray\u00fcze sahip olmas\u0131 gerekiyorsa, OPNsense \u00fczerinde de bu VLAN'lar\u0131 tan\u0131mlaman\u0131z gerekir.<\/p>\n<ol>\n<li><strong>OPNsense'de VLAN Olu\u015fturma:<\/strong>\n<ul>\n<li><strong>Aray\u00fczler > Atamalar > VLAN<\/strong> sekmesine gidin.<\/li>\n<li><code>+ Ekle<\/code> butonuna t\u0131klay\u0131n.<\/li>\n<li><strong>Parent Interface<\/strong> olarak az \u00f6nce olu\u015fturdu\u011funuz k\u00f6pr\u00fc aray\u00fcz\u00fcn\u00fc (<code>BRIDGE_LAN_LAGG<\/code>) se\u00e7in.<\/li>\n<li><strong>VLAN Tag<\/strong> k\u0131sm\u0131na UniFi'de tan\u0131ml\u0131 VLAN ID'sini girin.<\/li>\n<li><strong>Description<\/strong> alan\u0131na a\u00e7\u0131klay\u0131c\u0131 bir isim verin (\u00f6rn. <code>VLAN10_OGRENCI<\/code>).<\/li>\n<li>Kaydedin.<\/li>\n<\/ul>\n<\/li>\n<li><strong>VLAN Aray\u00fcz\u00fcn\u00fc Atama:<\/strong>\n<ul>\n<li><strong>Aray\u00fczler > Atamalar > Aray\u00fcz Atamalar\u0131<\/strong> sekmesine gidin.<\/li>\n<li>Yeni bir aray\u00fcz ekleyin ve az \u00f6nce olu\u015fturdu\u011funuz VLAN'\u0131 (<code>VLAN10_OGRENCI<\/code>) se\u00e7in.<\/li>\n<li>Bu aray\u00fcze bir IP adresi atayabilirsiniz (e\u011fer OPNsense'in bu VLAN'da bir gateway\/router olarak \u00e7al\u0131\u015fmas\u0131n\u0131 istiyorsan\u0131z) veya sadece \"Enable\" b\u0131rakarak Layer 2 trafi\u011fi i\u00e7in kullanabilirsiniz.<\/li>\n<li>Kaydedin ve de\u011fi\u015fiklikleri uygulay\u0131n.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p>Bu ad\u0131mlarla, OPNsense, LAGG k\u00f6pr\u00fcs\u00fc \u00fczerinden gelen belirli VLAN trafi\u011fini anlayabilir ve bu VLAN'lar i\u00e7in \u00f6zel g\u00fcvenlik duvar\u0131 kurallar\u0131 uygulayabilir veya o VLAN i\u00e7inde bir a\u011f ge\u00e7idi (gateway) olarak i\u015flev g\u00f6rebilir. UniFi taraf\u0131nda ise, LAGG portu zaten \"All\" veya belirli VLAN'lar\u0131 i\u00e7eren bir profil ile yap\u0131land\u0131r\u0131lmal\u0131d\u0131r ki, t\u00fcm VLAN trafi\u011fi LAGG \u00fczerinden ge\u00e7ebilsin.<\/p>\n<h3>Geli\u015fmi\u015f G\u00fcvenlik Politikalar\u0131 Uygulama<\/h3>\n<p>\u015eeffaf k\u00f6pr\u00fc modunda OPNsense, a\u011f\u0131n\u0131z\u0131n g\u00fcvenlik katman\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirir. Temel ge\u00e7i\u015f kural\u0131n\u0131 ayarlad\u0131ktan sonra, a\u011f\u0131n\u0131z\u0131n ihtiya\u00e7lar\u0131na g\u00f6re daha spesifik g\u00fcvenlik politikalar\u0131 uygulayabilirsiniz:<\/p>\n<ul>\n<li><strong>IDS\/IPS (Intrusion Detection\/Prevention System):<\/strong> OPNsense'in Suricata veya Snort gibi entegre IDS\/IPS \u00e7\u00f6z\u00fcmlerini etkinle\u015ftirerek, bilinen tehditlere kar\u015f\u0131 a\u011f\u0131n\u0131z\u0131 koruyabilirsiniz. Bu sistemler, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131, sald\u0131r\u0131lar\u0131 ve anormal trafik desenlerini ger\u00e7ek zamanl\u0131 olarak alg\u0131lar ve engeller.<\/li>\n<li><strong>Web Filtreleme ve Uygulama Kontrol\u00fc:<\/strong> Squid proxy ve SquidGuard kullanarak web trafi\u011fini filtreleyebilir, belirli kategorilere (pornografi, kumar vb.) eri\u015fimi engelleyebilir veya belirli uygulamalar\u0131n (\u00f6rne\u011fin sosyal medya uygulamalar\u0131) kullan\u0131m\u0131n\u0131 k\u0131s\u0131tlayabilirsiniz.<\/li>\n<li><strong>Geobloklama:<\/strong> Belirli \u00fclkelerden gelen veya belirli \u00fclkelere giden trafi\u011fi engelleyerek (GeoIP filtreleme) potansiyel tehdit vekt\u00f6rlerini azaltabilirsiniz.<\/li>\n<li><strong>Trafik \u015eekillendirme (Traffic Shaping):<\/strong> A\u011f\u0131n\u0131zdaki belirli hizmetlere (VoIP, video konferans) \u00f6ncelik vererek veya d\u00fc\u015f\u00fck \u00f6ncelikli trafi\u011fi k\u0131s\u0131tlayarak a\u011f performans\u0131n\u0131 optimize edebilirsiniz.<\/li>\n<\/ul>\n<p>Bu ileri d\u00fczey \u00f6zellikler, a\u011f\u0131n\u0131z\u0131 sadece h\u0131zl\u0131 ve yedekli de\u011fil, ayn\u0131 zamanda son derece g\u00fcvenli ve y\u00f6netilebilir k\u0131lar. OPNsense'in sundu\u011fu esneklik sayesinde, UniFi ekosisteminin y\u00f6netimi kolay aray\u00fcz\u00fcn\u00fc korurken, kurumunuzun veya ev a\u011f\u0131n\u0131z\u0131n g\u00fcvenlik ve kontrol ihtiya\u00e7lar\u0131n\u0131 \u00fcst seviyeye ta\u015f\u0131yabilirsiniz.<\/p>\n<h2>Vaka Analizi: B\u00fcy\u00fck Bir Kurumda LAGG K\u00f6pr\u00fc Uygulamas\u0131 ve Sonu\u00e7lar\u0131<\/h2>\n<p>\u015eimdiye kadar teorik bilgileri ve ad\u0131m ad\u0131m kurulumu ele ald\u0131k. Peki, bu karma\u015f\u0131k yap\u0131 ger\u00e7ek d\u00fcnyada nas\u0131l bir fark yarat\u0131yor? Bu vaka analizi, b\u00fcy\u00fck bir e\u011fitim kurumunun a\u011f altyap\u0131s\u0131n\u0131 g\u00fc\u00e7lendirmek i\u00e7in OPNsense, UDM ve UniFi tabanl\u0131 \u015feffaf bir LAGG k\u00f6pr\u00fc uygulamas\u0131n\u0131 ve elde edilen sonu\u00e7lar\u0131 inceleyecektir.<\/p>\n<h3>Kurumun Kar\u015f\u0131la\u015ft\u0131\u011f\u0131 Sorunlar<\/h3>\n<p>Anadolu'da b\u00fcy\u00fck bir \u00fcniversite, mevcut a\u011f altyap\u0131s\u0131nda \u00e7e\u015fitli sorunlar ya\u015f\u0131yordu. Yakla\u015f\u0131k 5000 \u00f6\u011frenci ve 1000 akademisyenin kulland\u0131\u011f\u0131 a\u011f, \u00f6zellikle ders d\u00f6nemi ba\u015flang\u0131\u00e7lar\u0131nda veya s\u0131nav d\u00f6nemlerinde a\u015f\u0131r\u0131 y\u00fckleniyordu. Mevcut UniFi UDM Pro, y\u00fcksek \u00f6\u011frenci yo\u011funlu\u011fu ve a\u011fdaki yo\u011fun Layer 7 trafik denetimi ihtiya\u00e7lar\u0131 kar\u015f\u0131s\u0131nda zaman zaman performans darbo\u011fazlar\u0131 ya\u015f\u0131yordu. Ayr\u0131ca, \u00fcniversitenin g\u00fcvenlik politikalar\u0131, UDM Pro'nun sundu\u011fu temel tehdit y\u00f6netimi \u00f6zelliklerinin \u00f6tesine ge\u00e7en detayl\u0131 bir filtreleme ve izleme gerektiriyordu. Temel sorunlar \u015funlard\u0131:<\/p>\n<ul>\n<li><strong>Performans Darbo\u011fazlar\u0131:<\/strong> \u00d6zellikle merkezi sunuculara eri\u015fim ve y\u00fcksek bant geni\u015fli\u011fi gerektiren uygulamalar (uzaktan e\u011fitim platformlar\u0131, laboratuvar sim\u00fclasyonlar\u0131) s\u0131ras\u0131nda a\u011fda yava\u015flamalar ya\u015fan\u0131yordu.<\/li>\n<li><strong>Yedeklilik Eksikli\u011fi:<\/strong> UDM Pro ile ana UniFi Switch aras\u0131ndaki tek 10 Gbps SFP+ ba\u011flant\u0131s\u0131, kritik bir tek hata noktas\u0131yd\u0131 (Single Point of Failure). Bu ba\u011flant\u0131da bir sorun ya\u015fanmas\u0131 durumunda, t\u00fcm kamp\u00fcs a\u011f\u0131 etkilenecekti.<\/li>\n<li><strong>\u0130leri D\u00fczey G\u00fcvenlik \u0130htiya\u00e7lar\u0131:<\/strong> Bilimsel ara\u015ft\u0131rmalar\u0131n yap\u0131ld\u0131\u011f\u0131 ve hassas verilerin depoland\u0131\u011f\u0131 sunucular\u0131n bulundu\u011fu laboratuvar a\u011flar\u0131 i\u00e7in daha gran\u00fcler g\u00fcvenlik duvar\u0131 kurallar\u0131, geli\u015fmi\u015f IDS\/IPS ve web filtreleme gerekiyordu. Mevcut UDM Pro bu d\u00fczeyde bir esneklik sunmuyordu.<\/li>\n<li><strong>Trafik G\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc ve Denetimi:<\/strong> A\u011fdaki trafi\u011fin kim taraf\u0131ndan, nereye do\u011fru ve hangi uygulamalar i\u00e7in kullan\u0131ld\u0131\u011f\u0131 hakk\u0131nda yeterli bilgi toplanam\u0131yor, bu da sorun giderme ve bant geni\u015fli\u011fi y\u00f6netimi konusunda zorluklara yol a\u00e7\u0131yordu.<\/li>\n<\/ul>\n<h3>LAGG K\u00f6pr\u00fc \u00c7\u00f6z\u00fcm\u00fcn\u00fcn Uygulanmas\u0131<\/h3>\n<p>\u00dcniversitenin BT ekibi, mevcut UniFi altyap\u0131s\u0131n\u0131 koruyarak yukar\u0131daki sorunlar\u0131 \u00e7\u00f6zmek i\u00e7in OPNsense tabanl\u0131 \u015feffaf bir LAGG k\u00f6pr\u00fc entegrasyonuna karar verdi. Uygulama ad\u0131mlar\u0131 \u015fu \u015fekilde \u00f6zetlenebilir:<\/p>\n<ol>\n<li><strong>Donan\u0131m Se\u00e7imi:<\/strong> Y\u00fcksek performansl\u0131 bir sunucu \u00fczerinde OPNsense kurulumu yap\u0131ld\u0131. Bu sunucuda iki adet 10 Gbps SFP+ portu ve ek 1 Gbps portlar\u0131 bulunan bir NIC (A\u011f Aray\u00fcz Kart\u0131) kullan\u0131ld\u0131.<\/li>\n<li><strong>OPNsense LAGG Yap\u0131land\u0131rmas\u0131:<\/strong> \u0130ki adet 10 Gbps SFP+ portu, OPNsense \u00fczerinde LACP protokol\u00fc ile tek bir LAGG aray\u00fcz\u00fc olarak birle\u015ftirildi.<\/li>\n<li><strong>\u015eeffaf K\u00f6pr\u00fc Olu\u015fturma:<\/strong> Olu\u015fturulan LAGG aray\u00fcz\u00fc ile kamp\u00fcs a\u011f\u0131na ba\u011fl\u0131 di\u011fer bir 10 Gbps SFP+ portu, OPNsense \u00fczerinde \u015feffaf bir k\u00f6pr\u00fc olarak yap\u0131land\u0131r\u0131ld\u0131. Bu k\u00f6pr\u00fcye y\u00f6netim i\u00e7in bir IP adresi atand\u0131.<\/li>\n<li><strong>Fiziksel Ba\u011flant\u0131:<\/strong>\n<ul>\n<li>UDM Pro'nun ana LAN 10 Gbps SFP+ portu, OPNsense'in LAGG'sinin ilk \u00fcye portuna ba\u011fland\u0131.<\/li>\n<li>Kamp\u00fcs\u00fcn ana omurga anahtar\u0131 olan UniFi Switch Pro Aggregation'\u0131n 10 Gbps SFP+ portlar\u0131ndan biri, OPNsense'in LAGG'sinin ikinci \u00fcye portuna ba\u011fland\u0131.<\/li>\n<\/ul>\n<p>Bu ba\u011flant\u0131 UniFi taraf\u0131nda da LACP olarak yap\u0131land\u0131r\u0131ld\u0131. B\u00f6ylece UDM Pro ve UniFi Switch aras\u0131ndaki t\u00fcm trafik OPNsense \u00fczerinden 20 Gbps (teorik maksimum) LAGG t\u00fcneli ile ge\u00e7meye ba\u015flad\u0131.<\/p>\n<\/li>\n<li><strong>G\u00fcvenlik Duvar\u0131 Kurallar\u0131 ve Hizmetler:<\/strong> OPNsense \u00fczerinde ba\u015flang\u0131\u00e7ta t\u00fcm trafi\u011fe izin veren temel kurallar olu\u015fturuldu. Ard\u0131ndan, detayl\u0131 VLAN tabanl\u0131 kurallar, Suricata IDS\/IPS, Squid proxy ile web filtreleme ve belirli uygulama trafiklerine \u00f6ncelik veren trafik \u015fekillendirme politikalar\u0131 uyguland\u0131.<\/li>\n<\/ol>\n<h3>Elde Edilen Sonu\u00e7lar ve Faydalar\u0131<\/h3>\n<p>Bu uygulama sonucunda, \u00fcniversite a\u011f\u0131 bir\u00e7ok \u00f6nemli fayda sa\u011flad\u0131:<\/p>\n<ul>\n<li><strong>Artan Bant Geni\u015fli\u011fi ve Y\u00fck Dengeleme:<\/strong> \u0130ki adet 10 Gbps ba\u011flant\u0131n\u0131n birle\u015ftirilmesiyle, a\u011f\u0131n toplam bant geni\u015fli\u011fi 20 Gbps'ye ula\u015ft\u0131. Yo\u011funluk anlar\u0131nda trafik, LAGG'nin y\u00fck dengeleme algoritmalar\u0131 sayesinde her iki ba\u011flant\u0131ya da\u011f\u0131t\u0131larak performans darbo\u011fazlar\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde azald\u0131.<\/li>\n<li><strong>Yedeklilik ve Kesintisizlik:<\/strong> LAGG sayesinde, fiziksel ba\u011flant\u0131lardan biri (\u00f6rne\u011fin bir SFP+ mod\u00fcl\u00fc veya kablo) ar\u0131zaland\u0131\u011f\u0131nda, trafik an\u0131nda di\u011fer ba\u011flant\u0131ya aktar\u0131ld\u0131. Bu, tek hata noktas\u0131 sorununu ortadan kald\u0131rarak a\u011f kesintilerini en aza indirdi.<\/li>\n<li><strong>Geli\u015fmi\u015f G\u00fcvenlik:<\/strong> OPNsense'in IPS\/IDS, web filtreleme ve detayl\u0131 g\u00fcvenlik duvar\u0131 kurallar\u0131 sayesinde, a\u011fdaki k\u00f6t\u00fc niyetli trafik engellendi, istenmeyen web sitelerine eri\u015fim k\u0131s\u0131tland\u0131 ve potansiyel siber sald\u0131r\u0131lara kar\u015f\u0131 daha g\u00fc\u00e7l\u00fc bir savunma olu\u015fturuldu. \u00d6zellikle ara\u015ft\u0131rma laboratuvarlar\u0131 i\u00e7in \u00f6zel g\u00fcvenlik b\u00f6lgeleri (DMZ benzeri) OPNsense \u00fczerinden kolayca yap\u0131land\u0131r\u0131ld\u0131.<\/li>\n<li><strong>Daha \u0130yi Trafik G\u00f6r\u00fcn\u00fcrl\u00fc\u011f\u00fc:<\/strong> OPNsense'in kapsaml\u0131 raporlama ve izleme yetenekleri sayesinde, BT ekibi a\u011fdaki trafi\u011fi anl\u0131k olarak izleyebildi. Hangi \u00f6\u011frencilerin, hangi uygulamalar\u0131 ne kadar bant geni\u015fli\u011fiyle kulland\u0131\u011f\u0131n\u0131 g\u00f6rebildiler. Bu sayede, a\u011f kaynaklar\u0131 daha etkin y\u00f6netildi ve sorun giderme s\u00fcre\u00e7leri h\u0131zland\u0131.<\/li>\n<li><strong>Maliyet Etkin \u00c7\u00f6z\u00fcm:<\/strong> Mevcut UniFi altyap\u0131s\u0131 korunarak, pahal\u0131 ticari g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcmlerine ihtiya\u00e7 duyulmadan ileri d\u00fczey g\u00fcvenlik yetenekleri entegre edildi. OPNsense'in a\u00e7\u0131k kaynakl\u0131 yap\u0131s\u0131, lisans maliyetlerinden \u00f6nemli \u00f6l\u00e7\u00fcde tasarruf sa\u011flad\u0131.<\/li>\n<\/ul>\n<p>Bu vaka analizi, OPNsense, UDM ve UniFi'nin bir araya gelerek nas\u0131l g\u00fc\u00e7l\u00fc, esnek ve g\u00fcvenli bir a\u011f altyap\u0131s\u0131 olu\u015fturabilece\u011fini a\u00e7\u0131k\u00e7a g\u00f6stermektedir. \u015eeffaf LAGG k\u00f6pr\u00fcleme, mevcut altyap\u0131lar\u0131 d\u00f6n\u00fc\u015ft\u00fcrmek isteyen kurumlar i\u00e7in pratik ve etkili bir yakla\u015f\u0131md\u0131r.<\/p>\n<h2>Sonu\u00e7: A\u011f\u0131n\u0131zda Gelece\u011fe Y\u00f6nelik Bir Ad\u0131m<\/h2>\n<p>Bu kapsaml\u0131 rehber boyunca, OPNsense, UniFi Dream Machine (UDM) ve UniFi anahtarlar\u0131 kullanarak \u015feffaf bir LAGG (LACP) k\u00f6pr\u00fc kurman\u0131n t\u00fcm ad\u0131mlar\u0131n\u0131, temel kavramlardan ileri d\u00fczey optimizasyonlara kadar detayl\u0131 bir \u015fekilde inceledik. Modern a\u011f altyap\u0131lar\u0131n\u0131n ihtiya\u00e7 duydu\u011fu performans\u0131, yedeklili\u011fi ve g\u00fcvenli\u011fi bir araya getiren bu \u00e7\u00f6z\u00fcm, a\u011f y\u00f6neticileri i\u00e7in vazge\u00e7ilmez bir ara\u00e7 haline gelebilir. LAGG'nin sa\u011flad\u0131\u011f\u0131 bant geni\u015fli\u011fi art\u0131\u015f\u0131 ve kesintisiz \u00e7al\u0131\u015fma yetene\u011fi, UniFi ekosisteminin kullan\u0131c\u0131 dostu y\u00f6netim aray\u00fcz\u00fcyle birle\u015fti\u011finde, OPNsense'in derinlemesine g\u00fcvenlik ve trafik kontrol yetenekleriyle ta\u00e7lanmaktad\u0131r. B\u00f6ylece, mevcut a\u011f topolojinizi bozmadan, a\u011f\u0131n\u0131za kurumsal d\u00fczeyde g\u00fcvenlik ve esneklik katm\u0131\u015f olursunuz. \u0130ster k\u00fc\u00e7\u00fck bir i\u015fletme olun, ister b\u00fcy\u00fck bir e\u011fitim kurumu, bu entegrasyon size gelece\u011fe haz\u0131r, \u00f6l\u00e7eklenebilir ve y\u00f6netilebilir bir a\u011f\u0131n kap\u0131lar\u0131n\u0131 a\u00e7acakt\u0131r. Umar\u0131z bu rehber, a\u011f maceran\u0131zda size yol g\u00f6sterici olur ve karma\u015f\u0131k g\u00f6r\u00fcnen bu teknolojileri kolayca hayata ge\u00e7irmenize yard\u0131mc\u0131 olur.<\/p>\n<h2>S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n<ul>\n<li>\n<h3>1. \u015eeffaf k\u00f6pr\u00fc modunda OPNsense neden IP adresi almaz?<\/h3>\n<p>\u015eeffaf k\u00f6pr\u00fc, OSI modelinin 2. katman\u0131nda (Veri Ba\u011flant\u0131 Katman\u0131) \u00e7al\u0131\u015f\u0131r ve temel amac\u0131, fiziksel aray\u00fczler aras\u0131nda MAC adreslerine g\u00f6re trafi\u011fi iletmektir. Bir IP adresi (3. katman protokol\u00fc), y\u00f6nlendirme (routing) i\u015flevleri i\u00e7in gereklidir. OPNsense \u015feffaf k\u00f6pr\u00fc modunda \u00e7al\u0131\u015f\u0131rken y\u00f6nlendirme yapmad\u0131\u011f\u0131 i\u00e7in k\u00f6pr\u00fc aray\u00fcz\u00fcne (Bridge Interface) bir IP adresi atanmas\u0131 zorunlu de\u011fildir. Ancak, OPNsense'in y\u00f6netim aray\u00fcz\u00fcne eri\u015febilmek veya belirli VLAN'larda bir a\u011f ge\u00e7idi (gateway) g\u00f6revi g\u00f6rmesini sa\u011flamak isterseniz, k\u00f6pr\u00fc aray\u00fcz\u00fcne veya k\u00f6pr\u00fcye ba\u011fl\u0131 bir VLAN aray\u00fcz\u00fcne bir IP adresi atayabilirsiniz.<\/p>\n<\/li>\n<li>\n<h3>2. LAGG ve Bridge modundaki OPNsense, a\u011f performans\u0131n\u0131 nas\u0131l etkiler?<\/h3>\n<p>LAGG, birden fazla fiziksel ba\u011flant\u0131y\u0131 birle\u015ftirerek toplam bant geni\u015fli\u011fini art\u0131r\u0131r ve y\u00fck dengeleme ile a\u011f performans\u0131n\u0131 optimize eder. OPNsense'in \u015feffaf k\u00f6pr\u00fc modunda \u00e7al\u0131\u015fmas\u0131, normalde y\u00f6nlendirme ve NAT (Network Address Translation) gibi i\u015flemci yo\u011fun g\u00f6revleri atlad\u0131\u011f\u0131 i\u00e7in genellikle daha az gecikme (latency) ve daha y\u00fcksek verim (throughput) sa\u011flar. Ancak, OPNsense \u00fczerinde IPS\/IDS, derinlemesine paket denetimi, proxy veya VPN gibi geli\u015fmi\u015f g\u00fcvenlik hizmetleri etkinle\u015ftirilirse, bu hizmetler i\u015flemci g\u00fcc\u00fc gerektirece\u011fi i\u00e7in bir miktar performans d\u00fc\u015f\u00fc\u015f\u00fc ya\u015fanabilir. Do\u011fru donan\u0131m se\u00e7imi ve optimize edilmi\u015f kurallar bu etkiyi minimize eder.<\/p>\n<\/li>\n<li>\n<h3>3. UniFi Controller'da LAGG (LACP) ayarlar\u0131 nas\u0131l yap\u0131l\u0131r?<\/h3>\n<p>UniFi Controller aray\u00fcz\u00fcne giri\u015f yap\u0131n. \"Devices\" (Cihazlar) b\u00f6l\u00fcm\u00fcne gidin ve LAGG olu\u015fturmak istedi\u011finiz UniFi Switch veya UDM Pro cihaz\u0131n\u0131 se\u00e7in. \"Ports\" (Portlar) sekmesine t\u0131klay\u0131n. LAGG'ye dahil etmek istedi\u011finiz iki veya daha fazla portu se\u00e7in (genellikle shift tu\u015funa bas\u0131l\u0131 tutarak). Se\u00e7im yapt\u0131ktan sonra, sa\u011f \u00fcstte veya ilgili port ayarlar\u0131nda \"Aggregate\" veya \"Link Aggregation\" se\u00e7ene\u011fini g\u00f6receksiniz. Bu se\u00e7ene\u011fe t\u0131klayarak yeni bir LACP port grubu olu\u015fturabilirsiniz. UniFi, bu portlar\u0131 otomatik olarak LACP modunda yap\u0131land\u0131racakt\u0131r. Daha sonra OPNsense taraf\u0131nda da ayn\u0131 portlar\u0131 LACP modunda yap\u0131land\u0131rman\u0131z gerekir.<\/p>\n<\/li>\n<li>\n<h3>4. LAGG k\u00f6pr\u00fcs\u00fc \u00fczerinden VLAN trafi\u011fini nas\u0131l y\u00f6netirim?<\/h3>\n<p>LAGG k\u00f6pr\u00fcs\u00fc \u00fczerinden VLAN trafi\u011fini y\u00f6netmek i\u00e7in hem UniFi Controller'da hem de OPNsense'de uygun yap\u0131land\u0131rmalar yapmal\u0131s\u0131n\u0131z. UniFi Controller'da, LAGG grubuna dahil olan portlar\u0131n \"Switch Port Profile\" ayarlar\u0131n\u0131n, t\u00fcm ge\u00e7mesini istedi\u011finiz VLAN'lar\u0131 (genellikle \"All\" veya \u00f6zel bir Trunk port profili) i\u00e7erecek \u015fekilde ayarland\u0131\u011f\u0131ndan emin olun. OPNsense taraf\u0131nda ise, y\u00f6netmek istedi\u011finiz her bir VLAN i\u00e7in (\u00f6rne\u011fin, o VLAN i\u00e7in bir a\u011f ge\u00e7idi olu\u015fturmak veya \u00f6zel g\u00fcvenlik kurallar\u0131 uygulamak istiyorsan\u0131z) k\u00f6pr\u00fc aray\u00fcz\u00fc \u00fczerinde bir VLAN aray\u00fcz\u00fc olu\u015fturman\u0131z ve bu VLAN aray\u00fcz\u00fcne bir IP adresi ataman\u0131z gerekebilir. G\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 da ilgili VLAN aray\u00fcz\u00fcne g\u00f6re yap\u0131land\u0131rmal\u0131s\u0131n\u0131z.<\/p>\n<\/li>\n<li>\n<h3>5. Bu kurulumda bir sorun ya\u015farsam, nereden ba\u015flamal\u0131y\u0131m?<\/h3>\n<p>Sorun giderme s\u00fcrecine ba\u015flarken ilk olarak fiziksel ba\u011flant\u0131lar\u0131 kontrol edin. Kablolar\u0131n do\u011fru tak\u0131l\u0131 oldu\u011fundan ve LED g\u00f6stergelerinin aktif oldu\u011fundan emin olun. Daha sonra OPNsense ve UniFi Controller aray\u00fczlerinde LAGG durumunu kontrol edin. LAGG \u00fcyelerinin aktif olup olmad\u0131\u011f\u0131n\u0131 ve herhangi bir hata g\u00f6stergesi olup olmad\u0131\u011f\u0131n\u0131 inceleyin. OPNsense'in g\u00fcvenlik duvar\u0131 g\u00fcnl\u00fcklerini (Firewall Logs) kontrol ederek trafi\u011fin neden engellendi\u011fini anlayabilirsiniz. Ayr\u0131ca, a\u011fdaki cihazlar\u0131n IP al\u0131p almad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in basit ping testleri yap\u0131n. Unutmay\u0131n, g\u00fcvenlik duvar\u0131 kurallar\u0131 k\u00f6pr\u00fc modunda bile trafi\u011fi engelleyebilir, bu y\u00fczden ba\u015flang\u0131\u00e7ta t\u00fcm trafi\u011fe izin veren bir kural\u0131n oldu\u011fundan emin olun ve sorun giderdikten sonra bu kurallar\u0131 s\u0131k\u0131la\u015ft\u0131r\u0131n.<\/p>\n<\/li>\n<\/ul>\n<p><\/body><\/p>\n","protected":false},"excerpt":{"rendered":"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine)&hellip;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-35566","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi<\/title>\n<meta name=\"description\" content=\"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi\" \/>\n<meta property=\"og:description\" content=\"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-01T03:01:38+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"26 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi\",\"datePublished\":\"2025-12-01T03:01:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\"},\"wordCount\":5234,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\",\"name\":\"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-01T03:01:38+00:00\",\"description\":\"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi","description":"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi","og_description":"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.","og_url":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-01T03:01:38+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"26 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi","datePublished":"2025-12-01T03:01:38+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/"},"wordCount":5234,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/","name":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-01T03:01:38+00:00","description":"A\u011f altyap\u0131n\u0131zda performans\u0131 art\u0131rmak, yedeklilik sa\u011flamak ve y\u00f6netimi basitle\u015ftirmek mi istiyorsunuz? OPNsense, UniFi ve UDM (UniFi Dream Machine) cihazlar\u0131 aras\u0131nda \u015feffaf bir LAGG (Link Aggregation Group) k\u00f6pr\u00fcs\u00fc kurarak a\u011f\u0131n\u0131zda e\u015fsiz bir denge ve esneklik elde edebilirsiniz. Bu rehber, karma\u015f\u0131k g\u00f6r\u00fcnen bu s\u00fcreci ad\u0131m ad\u0131m a\u00e7\u0131klayarak, a\u011f y\u00f6neticilerine ve merakl\u0131lar\u0131na pratik bilgiler sunuyor.","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/opnsense-udm-ve-unifi-ile-seffaf-lagg-kopru-kurulumu-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"OPNsense, UDM ve UniFi ile \u015eeffaf LAGG K\u00f6pr\u00fc Kurulumu Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35566"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35566\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}