Text only | Text with Images

OPNsense Forum

English Forums => Virtual private networks => Topic started by: user12314 on October 18, 2026, 01:34:12 PM

Title: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 01:34:12 PM
I have followed https://docs.opnsense.org/manual/how-tos/wireguard-client.html and I'm not making a handshake. I see on my android wireguard app that data does leave, but no data comes back in my phone.

I read through the guide 3 times to make sure I did it correctly. I used an interface as recommended, and did not make any outbound NAT rules.

I also tried filtering the live view logs for the WAN rule that redirects incoming vpn connections, i did not see any logs.

I tried 2 ports, 51820 and 51830, both did not work.

I'm stuck, can anyone help?
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 02:20:12 PM
just tried to do a packet capture using interface WAN, port 51830, protocol UDP and nothing showed up when trying to connect to the vpn.
Title: Re: Followed the official wireguard guide, no handshake
Post by: Patrick M. Hausen on October 18, 2026, 02:38:05 PM
Is your Uplink behind CGNAT, possibly? Or your OPNsense behind an ISP router? Post the first two octets of your WAN address, please.
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 02:40:15 PM
Quote from: Patrick M. Hausen on Today at 02:38:05 PMIs your Uplink behind CGNAT, possibly? Or your OPNsense behind an ISP router? Post the first two octets of your WAN address, please.

I'm not sure about CGNAT, it is not behind a ISP router, it directly connects to the internet.
`curl icanhazip.com` gives me 94.255 as the first 2 octets.
Thank you
Title: Re: Followed the official wireguard guide, no handshake
Post by: Patrick M. Hausen on October 18, 2026, 02:42:56 PM
What does your OPNsense display in Interfaces > Overview or in the Interfaces dashboard widget?
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 02:45:42 PM
Quote from: Patrick M. Hausen on Today at 02:42:56 PMWhat does your OPNsense display in Interfaces > Overview or in the Interfaces dashboard widget?
There, the wan ipv4 starts with 100.83, and the ipv6 with 2a00:1598
Title: Re: Followed the official wireguard guide, no handshake
Post by: Patrick M. Hausen on October 18, 2026, 02:50:08 PM
IPv4 is CGNAT. Your OPNsense cannot be reached from the Internet via IPv4 at all. Use IPv6 for your VPN.
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 02:51:15 PM
Quote from: Patrick M. Hausen on Today at 02:50:08 PMIPv4 is CGNAT. Your OPNsense cannot be reached from the Internet via IPv4 at all. Use IPv6 for your VPN.
okay, thank you
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 03:27:43 PM
Quote from: Patrick M. Hausen on Today at 02:50:08 PMIPv4 is CGNAT. Your OPNsense cannot be reached from the Internet via IPv4 at all. Use IPv6 for your VPN.
i just realized that before i installed opnsense (i switched from pfsense with a separate wireguard vpn server, not part of the pfsense install) that it worked perfectly fine before without ipv6. I never set up any routing for ipv6 on pfsense at least.

Could it be something else too?
Title: Re: Followed the official wireguard guide, no handshake
Post by: Patrick M. Hausen on October 18, 2026, 03:29:12 PM
Probably not. Maybe your ISP switched from public IPv4 address to CGNAT when you switched your device and they saw a different MAC address. Call their support, maybe?
Title: Re: Followed the official wireguard guide, no handshake
Post by: user12314 on October 18, 2026, 03:32:27 PM
good idea, i'll give that a go
Text only | Text with Images