OPNsense Forum

English Forums => Virtual private networks => Topic started by: mr.sarge on August 23, 2025, 03:58:51 PM

Title: Wireguard NordVPN failover
Post by: mr.sarge on August 23, 2025, 03:58:51 PM
Hi,

I would like to switch from legacy OpenVPN to Wireguard for my NordVPN connections. With OpenVPN i used multiple remote servers if one of them is not reachable(see screenshot). How can I achieve the same with Wireguard?

Does it work with one intance and multiple peers or do I have to configure multiple instances/peer, gateways and group them?
If multiple peers / instance works also, what gateway ip address should be used?

kind regards,


Title: Re: Wireguard NordVPN failover
Post by: mr.sarge on August 30, 2025, 12:28:22 PM
Does anyone have a recommendation?

regards,
Title: Re: Wireguard NordVPN failover
Post by: mr.sarge on August 30, 2025, 06:01:09 PM
Hello,

I'm not sure if this configuration is the right one, but at the moment it seems to be working for my requirements:

I created:
- 3 Wireguard instances (1/peer, different listen ports and gateway)
- 3 interfaces
- 3 gateways
- gateway group (trigger level -> member down)

Used the gateway group for my policy-based routing. It's a bit more work to configure compared to OpenVPN, but when It works its oK :-)

regards