Messages

1

Virtual private networks / Wireguard documentation outdated

« on: June 14, 2021, 08:26:19 pm »

Hi! I'm a new OPNsense user and I wanted to set up a road warror wireguard server on my OPNsense box. The documentation in https://docs.opnsense.org/manual/how-tos/wireguard-client.html seems outdated/wrong.

• In Step 2b the whole port forwarding thing is not needed.
• Step 2c: if you add a wireguard interface and then reboot OPNsense, an outbound rule will be automatically generated for you. I learned this from https://blog.linuxserver.io/2019/11/16/setting-up-wireguard-on-opnsense-android/ . If you don't add an interface, which is apparently not necessary, then I guess you need an outbound rule.
  
  • Edit: At this point I had to reboot so that the automatic outbound rule actually appeared.
• This is the most important thing: The article does not tell you to open the firewall from WAN. You need a WAN rule to allow UDP traffic to the WAN address, port 51820 (the default), from everywhere.

Who maintains the documentation? Should I make a GitHub issue about this?