OPNsense Forum

English Forums => Virtual private networks => Topic started by: kss on April 24, 2024, 09:27:55 PM

Title: Resolving names over wireguard subnet
Post by: kss on April 24, 2024, 09:27:55 PM
I apologize if this is an already answered question --

I have connected my two sites using wireguard VPN site to site setup. How do you resolve names across the VPN? I am able to ping the far-end machines by their IP addresses, from either site, but not by name.

Both sites run similarly configured opnsense firewalls; both sites use unbound. I tried adding the DNS server name of the far end site to the DNS server list but that didn't work. I even tried running WINS (gasp!) at both sites on a raspberry pi that is running pi-hole, again, no luck. I seem to be missing something fundamental here, for which I seek help.
Title: Re: Resolving names over wireguard subnet
Post by: Patrick M. Hausen on April 24, 2024, 09:47:03 PM
Use different domains for both sites. Add a domain override pointing to the remote unbound for the remote domain at both sites.

There is to my knowledge no solution to "merge" all hosts on both sides into one domain with OPNsense only. If you run Active Directory or similar infrastructure it's rather trivial, because you normally have a DC at each site.
Title: Re: Resolving names over wireguard subnet
Post by: kss on April 25, 2024, 03:50:07 PM
I will try that, thanks!
Title: Re: Resolving names over wireguard subnet
Post by: kss on May 06, 2024, 07:28:24 PM
 Thanks for your insight -- that I should have different domain names at the two sites connected via VPN, I have a more functional site-to-site VPN.


Only thing that is still blocked is being able to browse directories using file manager -- both styles of addressing -- \\PC-2 and \\192.168.2.2 -- time out.

Pretty sure these are being blocked by the firewall rules, but am nervous about experimenting with them.