Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - R4v3n

#1
I though about it this morning, but my current firewall rule on the "wireguard" interface allows everything from the wireguard net.
Will check this again tonight.
#2
I'm trying to get a working wireguard too, and got some kinds of same problems than OP.
Currently I can connect my android client to my opnsense wireguard server, I can ping all others LANs.
I tried to put my wireguard server IP as a DNS server (present in Unbound access list), and did the same with the LAN opnsense IP (both pingable).
In both cases, I'm not able to have a DNS resolution working on the android device. I can ping my LANs, I can ping the whole internet IPs, but no DNS resolution.

If  somebody have an idea ?

So currently for me, it's way faster to setup an OpenVPN service on OPNsense than wireguard.
#3
Merci de la réponse.

Ok donc rien ne bouge au niveau de la configuration des règles, par contre il faut réattribuer les nouvelles cartes aux différentes interfaces ?
#4
Ok so no chance to get it up&running just by copying the MACs.
So I'll try some setups and, if I got something interesting, will post the infos here later.

Thanks :)
#5
Hello guys,
I would like to replace an old ipcop by a brand new opnsense, but I can't get another dedicated hardware for that.
So I'm asking if there's a way to install & configure opnsense in a VM, then export the configuration in a (same version) fresh install on baremetal.
I mean, a way to do it without losing the attribution of interfaces. Maybe using the same MACs ? Maybe another way ?

Thanks a lot !
#6
Bonjour à tous,
je souhaite remplacer un ipcop vieillissant par un opnsense, cela dit comme je ne peux pas provisionner un nouveau routeur, je souhaite pouvoir refaire toute la configuration d'opnsense dans une VM pour ensuite l'importer dans une fresh install du même opnsense.

Est-ce possible facilement, sans foutre le b***** ? Par exemple en utilisant les mêmes MACs ?

Merci :)