Topics

[DISCLAIMER]

DISCLAIMER I'm sure cleverer and greater minds than mine have achieved this in other ways and quite probably with more finesse, but it does seem to generate a few questions on the internet so figured I'd post what worked for me.

EDITED 20/2/22  Following the post by hushcoden (Thanks) below it appears the uPNP setup I had included is superfluous to requirements and I've removed it, as I've never been a fan of uPNP!

I've had a PS4 for years and never bothered to fix my NAT type as I don't play online, however I've been lucky enough to recently get hold of a PS5 so decided to work out my NAT issues and thought I'd post it here for anyone who might be interested.

Step 1

I setup static mappings in my DHCP for both the ethernet and wifi interfaces on my PS5 (To give me the flexibility of being able to move it elsewhere in the house and not necessarily need a hardwired connection.



Step 2

I created an alias for both of these IP addresses.



Step 3

Finally here's my NAT rule (I'm using Hybrid NAT)

So I recently migrated to OPNsense from Pfsense, I'm very impressed and glad I made the switch.  I've been experimenting with WireGuard a fair bit and have written a couple of blog posts on my progress so far with an OPNsense WireGuard "server" and Android and Ubuntu desktop "clients", so my next step was to try and setup Mullvad as the "server" and OPNsense as the "client"

I've been referencing the guides below:

https://wiki.opnsense.org/manual/how-tos/wireguard-client-mullvad.html
https://wiki.opnsense.org/manual/how-tos/wireguard-client-azire.html
https://www.routerperformance.net/opnsense-wireguard-plugin-azirevpn/

I can get the tunnel up, as evidenced here. (wg1, wg0 is my "WireGuard server for connection to my LAN remotely." and am using a custom port to receive the incoming connection.









(If I do not disable routes then I find all my internet access from LAN disappears.)

Undeterred I figured some manual routing would work and give me more granular control over things, so I created an interface.



and added a firewall rule



But traffic is still going out over WAN, rather than the Mullvad interface.  I tried to create a gateway, as shown here



and can manually bring it up, by clicking on the grey arrow, although I'm not sure how having the gateway really changes anything given my existing NAT rule.



I'm obviously missing something, but I'll be damned if I know what, and if anyone can give me some pointers I'd be very grateful indeed.

Sorry for the lengthy post/pictures, but figured it would be better to have too much information, rather than not enough.

Thanks

C

I've already posted a link to my first WireGuard guide last week on connecting an Android phone to an OPNsense WireGuard tunnel here. 

(The direct link is https://blog.linuxserver.io/2019/11/16/setting-up-wireguard-on-opnsense-android/.)

This is my second guide on connecting an Ubuntu desktop to WireGuard and implementing a menu system to toggle the tunnel up/down.

Can read it on the blog of LinuxServer.io, an opensource docker group I belong to here.

https://blog.linuxserver.io/2019/11/24/connect-an-ubuntu-client-to-opnsense-wireguard-tunnel-with-a-gui-toggle-in-gnome/

I hope some of you find it useful.

Hey everyone, new to OPNsense, been wanting to try it out for a long time, but knowing I'd have to start from scratch after using Pfsense for a couple of years meant I had a degree of inertia.  WireGuard was the impetus I needed and I'm glad I jumped ship.

I've written a OPNsense WireGuard guide on the blog of LinuxServer.io an opensource docker group I belong to, figured it might be useful to some people here so here's a link.

https://blog.linuxserver.io/2019/11/16/setting-up-wireguard-on-opnsense-android/

Hope it helps one or two of you getting started with WireGuard.

Got another one in the pipeline to connect an Ubuntu laptop to OPNsense as well.

I know it might be easy to a lot of you, but a couple of things tripped me up, so I decided to write a guide.