Power is the last resort
Vigil tries a DHCP renewal first, which fixes a large share of stuck-lease cases with no outage at all.
OPNsense · modem watchdog
Vigil watches your firewall’s WAN connection and power-cycles the modem when the ISP stops handing out a DHCP lease. Built for sites nobody is physically at.
Why it exists
A hung modem at a warehouse, a tower site, or a branch office means a truck roll. Vigil means somebody does not have to drive there.
Vigil tries a DHCP renewal first, which fixes a large share of stuck-lease cases with no outage at all.
If the WAN gateway still answers, the fault is upstream and a power cycle cannot help — so Vigil does not cycle.
A cap on how often it can switch means a fault it cannot fix never becomes a modem rebooting all night.
On crash, on signal, on service stop, on package removal, on reboot — opening the relay always ends with power restored.
Two products
The OPNsense plugin that drives a USB relay. It checks in daily, pulls updates from the gated repository, and recovers your uplink without a truck roll.
A 2-channel Ethernet relay board with its own firmware and a ping watchdog. No firewall involved — and it can cycle the router as well as the modem.
The wiring is the point
The relay is wired COM + NC, so it must be actively energized to hold the modem off. Lose power to the firewall, unplug the USB cable, or crash the daemon — and the contact falls closed and the modem comes back. The safe state is the unpowered state.
See the full logicShip it
Buy the NET2D outright, or get the Vigil USB relay with a 1-year licence. Renewing is a licence key and a card away.