Messages

good idea, i'll give that a go

IPv4 is CGNAT. Your OPNsense cannot be reached from the Internet via IPv4 at all. Use IPv6 for your VPN.

i just realized that before i installed opnsense (i switched from pfsense with a separate wireguard vpn server, not part of the pfsense install) that it worked perfectly fine before without ipv6. I never set up any routing for ipv6 on pfsense at least.

Could it be something else too?

IPv4 is CGNAT. Your OPNsense cannot be reached from the Internet via IPv4 at all. Use IPv6 for your VPN.

okay, thank you

What does your OPNsense display in Interfaces > Overview or in the Interfaces dashboard widget?

There, the wan ipv4 starts with 100.83, and the ipv6 with 2a00:1598

Is your Uplink behind CGNAT, possibly? Or your OPNsense behind an ISP router? Post the first two octets of your WAN address, please.

I'm not sure about CGNAT, it is not behind a ISP router, it directly connects to the internet.
`curl icanhazip.com` gives me 94.255 as the first 2 octets.
Thank you

just tried to do a packet capture using interface WAN, port 51830, protocol UDP and nothing showed up when trying to connect to the vpn.

I have followed https://docs.opnsense.org/manual/how-tos/wireguard-client.html and I'm not making a handshake. I see on my android wireguard app that data does leave, but no data comes back in my phone.

I read through the guide 3 times to make sure I did it correctly. I used an interface as recommended, and did not make any outbound NAT rules.

I also tried filtering the live view logs for the WAN rule that redirects incoming vpn connections, i did not see any logs.

I tried 2 ports, 51820 and 51830, both did not work.

I'm stuck, can anyone help?