Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - kermitxyz

#1
Virtual private networks / Wireguard Site to Site
May 12, 2025, 11:42:01 PM
I followed the official guide for Wireguard site to site VPN.

I have created the Wireguard instances and peers and they are handshaking, but I cannot send/receive to the remote LAN.

Do I need to create a Wireguard interface etc.?
Do I need to create routes somewhere?

The official guide doesn't mention either, but I can't ping the remote OPNSense router via the site to site VPN

(I am configuring it via a dial-in Wireguard VPN which does work fine - separate instance and port).

Any pointers much appreciated.
#2
General Discussion / Re: Access to modem on WAN port
February 28, 2025, 09:32:37 PM

That works, but I also had to put a firewall rule on the LAN interface to allow the LAN source access to the 4G network interface.

Thank you so much for your help, much appreciated.
#3
General Discussion / Re: Access to modem on WAN port
February 28, 2025, 02:48:35 PM
Quote from: viragomann on February 27, 2025, 10:53:38 PM
Quote from: kermitxyz on February 27, 2025, 09:51:20 PMUnder System: Gateways: Configuration  The 4G gateway has IP 192.168.100.254
Did you check "Upstream Gateway" there? This is needed.
It was not checked, so I have now enabled it.

QuoteIf so, check in Firewall > NAT > Outbound if there are automatic rules added to that interface.
Having done the above there are no rules here, and I still can't access the device.
#4
General Discussion / Access to modem on WAN port
February 27, 2025, 09:51:20 PM
I have a 4G modem as a WAN port for backup (failover) but I cannot access the configuration page of the 4G modem

The OPNsense router IP is 192.168.123.254 and all local PCs are on that subnet

The modem is attached to one of the router interfaces with static IP 192.168.100.100  and the modem has static IP 192.168.100.254

Under System: Gateways: Configuration  The 4G gateway has IP 192.168.100.254

Ping monitoring works, failover works, and I CAN ping 192.168.100.254 from an SSH session to the router.  However, I can't ping it from my desktops.  I would like to be able to access the modem via the web for monitoring.

Any advice most welcome thank you
#5
General Discussion / DNS over Wireguard VPN
February 27, 2025, 06:49:02 PM

I have an entry in UnboundDNS > overrides - "host@localdomain"   which resolves to a local IP on my LAN (say 192.168.10.45)

Inside the LAN I can ping just "host" and get connectivity

However when I am connected to OPNSense via Wireguard VPN I have to use "host@localdomain" rather than just "host" (the latter does not resolve)

Please could anyone explain why and if this can be changed?

Many thanks
#6
Changing from the on-board NIC (Fujitsu S920) to another network port in the router seems to have resolved the issue.  The router and switch indeed couldn't auto-negotiate.  Perhaps a driver issue?
#7
Quote from: ludarkstar99 on December 12, 2024, 02:43:24 AMAlso, make sure there's a firewall rule in LAN interface, on top of the list, allowing the lan subnet (source) to the modem address (destination), without force any gateway or gateway group - just leave default.
Since you said "also" do I need to do both this and the other suggestion?  I am struggling with this now!
#8
Note - if I disable the fibre (default) gateway, I can then ping both 192.168.100.100 (the address of the 4G interface) and 192.168.100.254 (the address of the 4G modem).  It is just when the preferred gateway is working that I can no longer ping these IPs.

This is not a major problem, but it would be useful to be able to access the 4G modem via web.

#9
Quote from: Patrick M. Hausen on December 11, 2024, 11:38:40 PMAdd an outbound NAT rule on that particular interface.
As in Firewall > NAT > Outbound ?

Changed Modem to Hybrid (auto after manual rules)

I have created rule:

Interface: LAN
Destination address 192.168.100.254/32
Translation/target : 4G_IF_Address (i.e. the 4G modem interface)

But this does not help.
#10
I have created a failover group and all works fine, but I cannot access the configuration page of the 4G modem

The LAN address is 192.168.123.0

The modem is attached to one of the router interfaces with static IP 192.168.100.100  and the modem has static IP 192.168.100.254

Under System: Gateways: Configuration  The 4G gateway has IP 192.168.100.254

Ping monitoring works, failover works, and I CAN ping 192.168.100.254 from an SSH session to the router.  However, I can't ping it from my desktops

What do I need to do to fix this?  I wondered about adding a route in system  > routes but it says "Do not enter static routes for networks assigned on any interface of this firewall"

Any advice most welcome 
#11
General Discussion / Re: Failover to 4G
December 09, 2024, 10:51:18 PM
Anyone ??  :)
#12
General Discussion / Re: Local DNS
December 08, 2024, 11:23:18 PM
Hi Patrick

That works fine - thank you. 

For future reference if anyone else reads this post, I did have to restart the router after making the changes (restarting the service alone for some reason was not enough)

Cheers
Richard
#13
General Discussion / Re: Local DNS
December 08, 2024, 12:16:36 AM
So if I want "dev" to resolve to 192.168.123.123

I use * as the host and "dev" as the domain?

It works, but is that right?  I am not convinced I've done that properly.
#14
General Discussion / Re: Local DNS
December 07, 2024, 10:26:24 PM
Thanks, I'll check that.  Which is the better way though?
#15
General Discussion / Local DNS
December 07, 2024, 10:12:04 PM

I wish to have the OPNSense router enable DNS resolution for local hosts.  I can see two ways:

1. Use UnboundDNS and enable "Register DHCP Static Mappings"

2. Disable UnboundDNS and use DNSMasq instead.  I think the latter is better as I can then add other static hostnames other than those assigned by DHCP.

Is this the best way?

I am enjoying learning OPNSense so thank you for the help ;)