OPNsense Forum

English Forums => General Discussion => Topic started by: yahyoh on August 09, 2024, 08:01:14 PM

Title: Selective routing for vlan through VPN - No Internet (Wireguard) - FIXED
Post by: yahyoh on August 09, 2024, 08:01:14 PM
Hey Guys,

I have been trying to wrap my head around this issue, where im trying route only vlan20 through VPN.
Below steps i took:

1-created vlan20 network -> turned on DHCP
2- setup WG client  (Windscribe) as per the config file. -> connected with handshake
(https://i.imgur.com/sjvYHZw.png)
(https://i.imgur.com/mM2fcBk.png)

3-created wiregard interface

4-created WG gateway
(https://i.imgur.com/yKLIQKZ.png)

5-Created nat outbound rule for the WG.

(https://i.imgur.com/pjjfknv.png)

6-Created vlan20 rule to use WG gateway and created port forward nat rule to forward all dns quires to opnsense.

(https://i.imgur.com/tRACo4F.png)
(https://i.imgur.com/IzWUjau.png)

unbound already been restarted several times BTW and  its listening to all interfaces..

Same setup working fine on pfsense but not opnsene for some reason? i have been trying to get it to work without any success  :'(

any help would be appreciated.

Title: Re: Selective routing for vlan through VPN - No Internet (Wireguard)
Post by: yahyoh on August 11, 2024, 08:46:18 PM
FIXED The damn issue, after 6 hours of testing.

1- first i turend off  KEA DHCP and went back to ISC DHCP (not sure if it was related)

2- had to change the rule of nat dns port forwarding and turn off ( Destination / Invert).

(https://i.imgur.com/ADHPcXD.png)

Then everything worked nicely.  8)