Hi,
I have the following setup:
WAN, fixed IP, no VLAN, bound to igc0
WAN2, VLAN interface, VLAN 200, bound to igc0
WAN2 is using a link where privacy is not ensured, so I'd like to use a WireGuard VPN. But the VPN should only be used if a packet is going out on WAN2, not on WAN.
I would like to have a gateway group with both interfaces in it. If OPNsense decides to use WAN2, the packets should go through WireGuard. If WAN is used, the packets should go out directly.
I know how I can create route policies depending on source IP, but not on "WAN link used". Using a destination address is also not what I need.
Is this possible to achieve?
Thank you and best regards.
You can create a gateway group which includes the WAN gateway and the WireGuard gateway, but NOT the WAN2 gateway.
Cheers
Maurice