OPNsense Forum

English Forums => Virtual private networks => Topic started by: hagensieker on November 29, 2025, 08:35:10 PM

Title: Wireguard Local Traffic only
Post by: hagensieker on November 29, 2025, 08:35:10 PM
I had set up WireGuard successfully a year or three ago on Opnsense.  Then one day it just stopped working.  I have filled the hole with Tailscale but I need to get rolling with WG again.

I did manage while I was away this weekend to set up a new WG instance and peer.  Connecting works and had a handshake issue.  I have a pass rule set up for the WG instance under Firewall > Rules.

All I am getting is local traffic only.  And that's fine.  When I travel I want access to my Home Assistant, TrueNAS, QNAP, etc.  It works perfect. I am not able to pass internet traffic though.

Only problem there is on another device (GL.Inet) travel router.   I need the magic firewall rule or setting to accomplish.  Somebody please let me know what I'm missing.  Peer on Wireguard client:

[Interface]
PrivateKey = redacted=
ListenPort = 51820
Address = 10.10.10.2/24

[Peer]
PublicKey = redacted=
AllowedIPs = 0.0.0.0/0,::/0
Endpoint = 195.252.xxx.xxx:51820
PersistentKeepalive = 25

Again this passes local traffic.  I deleted DNS and have played with a few entries.

Pretty sure I need to tweak a firewall rule but not sure