Hello everyone,
I've already followed several tutorials explaining how to set up a VPN in my home network. Unfortunately, none of them have worked so far, and I'm slowly starting to get frustrated. I do have a suspicion about what might be causing the issue.
I'm using a FritzBox as my router/modem and configured OPNsense as an exposed host. As a result, my WAN IP on OPNsense is an internal IP address from the FritzBox.
My Opnsense is an exposed Host in my FritzBox.
So i can connect via my iphone to the opnsense but i dont get Internet on my iphone i also can see it in the firewall Logs. Additonal here are some screenshots from the configs. Maybe someone can help me.
(https://preview.redd.it/vpn-with-intern-wan-ip-possible-v0-dqvj1danwdng1.png?width=1252&format=png&auto=webp&s=a2a7ef420f9aa22de55c97c06ec0704afbf9a854)
(https://preview.redd.it/vpn-with-intern-wan-ip-possible-v0-r91r5danwdng1.png?width=1110&format=png&auto=webp&s=8560cf5930486d1123fbd863bbbddbf671454c11)
(https://preview.redd.it/vpn-with-intern-wan-ip-possible-v0-y56rdeanwdng1.png?width=1217&format=png&auto=webp&s=5b3c059e7975f6ea7b5e0e2512cbb5ebaf61e9b4)
(https://preview.redd.it/vpn-with-intern-wan-ip-possible-v0-yxyf6eanwdng1.png?width=1093&format=png&auto=webp&s=084b585caf469865704022e8184eaa6ca4198c11)
(https://preview.redd.it/vpn-with-intern-wan-ip-possible-v0-kyjqeeanwdng1.png?width=682&format=png&auto=webp&s=c73cdb1bb5999f0a51a065fbb66fbd8d82c20d0c)
At the very least, you need "Endpoint" and "Name" filled in with a value. Also, once the peer is created, I think you have to re-enter "Endpoint Address" and "Endpoint Port" on the Peers config name.
On the OPNsense side only the IP address of the system connection goes into "AllowedIPs". On the remote system "0.0.0.0/0" goes into "AllowedIPs" to establish a default route into the tunnel.
@Patrick M. Hausen What do you mean by " only the IP address of the system connection goes into "AllowedIPs" ? The Adress of the Firewall itself ? So the lokal IP Adress? Or do you mean my public IP ?
@vimage22 Are you sure? In the tutoral they said that those fields must be blank in the Peer Gererator. Only when you create a manuel peer you should put these information in
The tunnel address you assign to the "road warrior" device "dialing in".