Messages

[Objective]

Hi,

Objective
To configure a multi-SSID setup where:

Default SSID operates on native VLAN 1 (untagged) for management

Guest SSID operates on VLAN 3 (tagged) for client isolation

OPNsense firewall handles routing/DHCP for both VLANs


Diagram: https://ibb.co/ymD8wd8p

Devices:

Switch: TL-SG108E

AP: TL-WA1201

Firewall: OPNsense (25.1.9)

Symptoms:

Clients on Guest SSID (VLAN 3) fail to obtain IP address (stuck "obtaining IP")

Manual IP assignment (192.168.3.20) cannot ping gateway (192.168.3.1)

VLAN 1 clients can ping 192.168.3.1, but not the other way around

Default SSID (VLAN 1) works normally

No VLAN 3 traffic detected in packet captures


Troubleshooting Performed

1. Switch Configuration
VLAN ID   VLAN Name   Tagged Ports   Untagged Ports
1   Default               None   1-8
3   Guest               1, 8   None
PVID: All ports set to 1

VLAN setup from opnsense: https://ibb.co/p6KG55kn
Firewall rule: https://ibb.co/wXgpyNn
DHCP from opnsense: https://ibb.co/LzbcGpXy

Please assist.

sorry to bring this up but I am having the same issue.
I am on the latest opnsense version, and using DDNS as hostname for wireguard
Got Adguard home running on opnsense

Was there a solution for this problem?
tried various scripts to restart wireguard but none of them worked, the only way to make it work is by logging into the opnsene gui and restarting the wireguard tunnel from the dashboard.

when i check the vpn > wireguard > status - seems it shows the wrong port/tunnel before i restart it from the gui, after the restart from gui, all works fine