OPNsense Forum

English Forums => Virtual private networks => Topic started by: JaRi on April 11, 2024, 01:34:19 PM

Title: Wireguard two peers, not working
Post by: JaRi on April 11, 2024, 01:34:19 PM
Sorry if this is covered somewhere else, i have tried to google and google and search in here aswell, with no answers..

i have a small machine at home with newest version of opnsense installed.
i have attached pictures of my instance and two peers.

the second i enable my phone peer, the macbook dies

have i missed something completely ?

i was under the impression that i could have multiple devices use the same wireguard tunnel as long as i had them have a different IP internally ( macbook 192.168.100.3 and phone 192.168.100.5).
Title: Re: Wireguard two peers, not working
Post by: tiermutter on April 11, 2024, 01:41:24 PM
In server config for peers, the allowed IPs are the clients addresses, though add them instead of what they are allowed to talk to.
This is the most confusing thing in WG... Everything is called "allowed ip"  ::)
Title: Re: Wireguard two peers, not working
Post by: tiermutter on April 11, 2024, 01:46:50 PM
Maybe someone could raise a PR to fix notes for that option.
In GUI it says
QuoteList of networks allowed to pass trough the tunnel adapter. Use CIDR notation like 10.0.0.0/24.
but should be
QuoteUnique tunnel IP address (IPv4 and/or IPv6) of client - it should be a /32 or /128 (as applicable) within the subnet configured on the WireGuard Instance. For example, 10.10.10.2/32
as per docs.
Title: Re: Wireguard two peers, not working
Post by: tiermutter on April 11, 2024, 01:49:26 PM
Maybe the option itself should also be renamed, e.g.
QuotePeer's tunnel address
or to have consitency to original WG naming
QuotePeer's tunnel address (Allowed IPs)
.
Title: Re: Wireguard two peers, not working
Post by: flaviuvlaicu on April 12, 2024, 12:29:59 PM
How can I make the traffic from the wireguard pass through the AdGuard server? I currently can acces through the wireguard the local network but can access other websites only by manually setting the DNS server to 8.8.8.8 for example and would like to pass all the DNS request through the AdGuard server.
Title: Re: Wireguard two peers, not working
Post by: tiermutter on April 12, 2024, 01:48:23 PM
Is adguard running on your Sense or on dedicated system?