Messages

1

Virtual private networks / Re: [WIREGUARD] Site to Site doesn't work

« on: May 29, 2024, 09:43:10 pm »

Okay, I just changed. But that's not the cause of the problem.

2

Virtual private networks / Re: [WIREGUARD] Site to Site doesn't work

« on: May 29, 2024, 04:46:13 pm »

Thank you for your reply. Here you can see the Wireguard configuration as an attachment.

3

French - Français / Re: WEBGUI inaccessible via WAN

« on: May 27, 2024, 09:23:41 pm »

Good evening,

Perhaps this topic can help you : https://forum.opnsense.org/index.php?topic=37126.0

4

French - Français / Re: Sur le point de laisser tomber OPNSense....

« on: May 27, 2024, 09:14:59 pm »

N'hésite pas envoyer des captures d'écran de ce que tu as fait. Ce sera plus pratique pour t'aider à trouver la solution

5

General Discussion / Re: Virtual IP with NAT

« on: May 27, 2024, 06:42:08 pm »

Thank you for your answer.

I tried to make this but it's did worked. You can see my diagram summarizing what I've done in attachment. Could you tell me if this makes sense to you?

I'll try to be more reactive to reply this time :)

6

Virtual private networks / [WIREGUARD] Site to Site doesn't work

« on: May 27, 2024, 05:54:57 pm »

Hello team,

I've been trying to set up a Wireguard tunnel between my two firewalls but I've run into a lot of problems and it's complicated to debug it.
You can see my network map in the attachment.

After configuring the tunnel, I can see that packets are being exchanged between the 2 firewalls, but the tunnel doesn't seem to be going up.

Here's everything I've configured:
- Instances on the 2 FWs
- Peer on the 2 FWs
- Open a UDP port on both sides
- Authorize the right IP ranges + open flows on the “Wireguard (Group)” interface
- Add a keep alive of 25 for NAT

Any ideas? It seems I'm not the only one with this problem on the forum. Is it a bug in the new version of wireguard?

Thanks to all those who will take the time to read me !

7

General Discussion / Virtual IP with NAT

« on: January 13, 2024, 07:56:44 pm »

Hi team,

I am looking for a VIP with NAT feature in Opensense. I know it's simple in FortiGate but I want to configure it in opnsense.

LAN1 = 192.168.1.0/24 ; HOST1 = 192.168.1.5
LAN2 = 192.168.2.0/24 ; HOST2 = 192.168.2.54
My goal is to associate a VIP from LAN1 (e.g. 192.168.1. to reach the ip address 192.168.2.54 on LAN2.

Exemple in FortiGate :


Thanks for your help !

8

Hardware and Performance / QoS configuration (Shaper)

« on: February 15, 2023, 09:21:14 pm »

Hello everyone,

I would like to set up a traffic rule for my network with a guaranteed and a maximum throughput.
I have 650 Mbps of upload bandwidth and I would like to have :
- 500 Mbps guaranteed for video service
- 650 Mbps maximum for video service
Do you have a solution because I have the impression that this is not possible as a configuration on OPNsense.
Thanks to all !

9

French - Français / Installation de OPNsense sur Stormshield SN500

« on: November 06, 2022, 10:52:58 am »

Bonjour à tous,

J'ai récemment fais l'acquisition d'un firewall Stormshield SN500 pour une utilisation domestique cependant, celui-ci étant "end of life", j'aurais voulu y installer opnsense.
J'ai vu que cela était possible sur le SN300 (https://www.info-sec.fr/index.php/2021/04/05/installer-pfsense-opnsense-freebsd-sur-une-appliance-u70s-sn300/) donc j'aurais souhaité savoir ce que vous en pensiez et si l'un d'entre vous a déjà eu l'occasion de le déployer sur ce modèle.

Merci à tout ceux qui prendront le temps de lire ce sujet !