OPNsense Forum

English Forums => Virtual private networks => Topic started by: paulswansea on December 16, 2020, 04:25:00 PM

Title: Multiple Wireguard VPN Clients
Post by: paulswansea on December 16, 2020, 04:25:00 PM
I'm in the process of switching from OpenVPN Clients to WireGuard Clients on OPNsense. After an arduous day of trying, I have successfully managed to get the first client to work.

I manually set the Gateway to 10.100.0.1 (ip address on the VPN provider's server) in the WireGuard local configuration, and added a single 'far gateway' with that same address to the new interface for the WireGuard client which now routes perfectly.

However, I tried to set up a second client for a different country with the same VPN provider without success. when I added another new interface, then tried to attach a new gateway to that, I get the following error :

The following input errors were detected:
The gateway IP address "10.100.0.1" already exists.

Both client configurations I have been given use exactly the same gateway address. Is there a way to resolve this issue?


Title: Re: Multiple Wireguard VPN Clients
Post by: mimugmail on December 16, 2020, 07:00:06 PM
Normally you can set whatever IP address as it is a P2P link?
Title: Re: Multiple Wireguard VPN Clients
Post by: paulswansea on December 16, 2020, 10:19:48 PM
Normally in the Single Gateway address box? I've attached the screenshot to show that doesn't work. Unless I've done it wrong.
Title: Multiple Wireguard VPN Clients
Post by: Greelan on December 17, 2020, 02:46:45 AM
Have a look at this thread from post #4 onwards:
https://r.tapatalk.com/shareLink/topic?share_fid=197904&share_tid=20413&url=https%3A%2F%2Fforum%2Eopnsense%2Eorg%2Findex%2Ephp%3Ftopic%3D20413&share_type=t&link_source=app

The recommendation of setting your gateway IP to one below the IP of your local tunnel peer means you won't get a conflict. Although really any IP will do
Title: Re: Multiple Wireguard VPN Clients
Post by: paulswansea on December 17, 2020, 05:12:41 PM
Thanks for the link! Using an alternative ip address per new gateway as you suggested has allowed me to use multiple clients successfully.