Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - oscars

#1
So I have wireguard working after a few days.

Weird thing is that if you setup wrongly (because I know I did in a some tests) your wireguard probably it's stuck if you messed up with it.

Mine was stuck at "ROUTING: not a valid interface gateway address opnsense" even after uninstalling and installing the plugin.

So I reverted to default and setup up it from start now it's working fine.

EDIT: I didn't applied any of the recommended settings from youtube and posts that you need to change nat, alias, etc, I just did what was needed per se. Just start with settings from instance, then peers, and last enable wireguard.

Screenshots:
https://drive.google.com/drive/folders/1b40jr_BoD7ReOldYwtO1kWXb19YbKleP?usp=sharing

TLDR:
Tunnel Address 192.168.105.0/24 and then for this subnet I assigned each peer over here, ie personal peer1: allowed ip 192.168.105.1/32 and in their config I just use the same IP.

allow traffic port 51820 of wan and allow all traffic from wireguard to any network

Config example after the default one (interface privatekey):

.....
Address = 192.168.105.1/32
DNS = 172.16.100.1(localdnsip), 1.1.1.1, 1.0.0.1

[Peer]
PublicKey = publickeyfrominstance
AllowedIPs = 172.16.100.0/24 (subnet from the network I want to get access /24)
Endpoint = myddns.com:51820 public domain or ddns:51820


Best Regards.
#4
I did not do it when I was able to connect from another location to my home.

However when I came back to my home I was not able to browse over internet so I deleted every rule I did (the weird thing is that I was able to connect to wireguard from another location and ping local network).

When I tried to set up again wireguard it just doesn't work so I'll be trying this days again however I was able to connect to wireguard from another location without a problem before so there is some kind of success in it
#5
I'm close enough with this.

I have already pfsense wireguard to pcs/android, opnsense wireguard to pcs/android and I also happen to understand a little bit more of wireguard (peers, instances, ports, nat, rules needed for this) with this test. I will try to connect to opnsense this weekend I'll let you guys know the end of this history.
#6
Quote from: dolivas27 on November 28, 2023, 09:05:30 AM
Hello everyone....

I was wondering if someone could give me a hand with this.

I have tried for days to get this to work with the latest version 23.7.9 and for the life of me I can not get it working.

Does anyone have a step by step guide?

Thanks and much appreciate any help I can get.
Dean

Did you happen to find something?
#7
You are right.

Just remember that unbound and adguard save cache so if you apply changes you probably will need to clear the dns cache of unbound (or both of them) and maybe flush the local pc that will do the trick.

#8
I'm just so lost.

It seems my LAN is getting another gateway?
#9
Hi there guys,

I'm struggling to work with ipv6 over opnsense. Currently I use my PI with Adguard for DHCP/Ad Block (Adguard build in DHCP) over the GPON that my carrier provide (telmex, dhcp disabled)

Using this setup I do have ipv4 and ipv6 connectivity. How it seems it works it's that my ISP is giving me a /64 address for each device (tested directly with the GPON router they provide) and this works the same with adguard DHCP.

However I'm replacing my PI to a chinese nuc with OPNsense and when I can't find a way to make work ipv6.

I tried everything so far, SLAAC, changing id, RA, DHCPv6, Send prefix, send lenght, so far I can resolve ipv6 but there is no connecivity (I managed to ping to a ipv6 site and I got the ip of that site back but with no response whatsoever) however I do find my NIC is getting the same settings as with adguard so I'm lost.

Reading the forums seems like it's not only my problem so is this something that isn't currently working as it should?

#10
Hi there guys,

I'm trying to generate the voucher itself within the captive portal after a few tries I was able to connect to all the endpoints at voucher however I got a 200 ok with the status of error.

First problem was actually hitting the endpoint within the captive portal so I managed to pass that editing the proxy config and I'm able to access the voucher endpoint however no matter what I tried I can't get to generate the voucher with javascript.

UPDATE:
Forget it. After a few days I got it.

It seems that I just screw the service and it wasn't working even with the GUI. a Fresh install did the trick