Show Posts
1
23.1 Legacy Series / Help - "Road Warrior" wireguard setup disconnecting on LAN
« on: February 26, 2023, 08:35:46 pm »
I am looking to setup WireGuard so that I can have my phone always connected to my LAN wherever I go. I was hosting a WireGuard endpoint on a server on the LAN, and it has been working great for years. I wanted to move that endpoint to my OPNsense router, so I followed the OPNsense Road Warrior WireGuard documentation. I'm having troubles:
My phone (iOS) initially connects just fine. However, after the phone is not used for a while (sometimes 20 min, sometimes 6hrs), the connection drops. To reconnect, I have to manually go into the wireguard app and toggle the tunnel off and back on. It seems to only happen when I'm on the LAN. I tried changing the firewall rule from the "WAN" interface to "Floating" on the rec of some youtube tutorial, which seemed to make it better, but it still disconnected overnight. I can't find anything in the logs that has helped me so far, but maybe I'm not looking in the right place. The WireGuard tunnel to the other endpoint (server on the LAN) works flawlessly with the same phone and setup, which makes me think its a configuration issue on the OPNsense router.
I thought it might be a DNS issue, so I made the DNS endpoint on my phone the WAN IP address of my OPNsense router. That didn't help.
I tried the keepalive packets (server side), but that didn't help either.
Any advice?
My phone (iOS) initially connects just fine. However, after the phone is not used for a while (sometimes 20 min, sometimes 6hrs), the connection drops. To reconnect, I have to manually go into the wireguard app and toggle the tunnel off and back on. It seems to only happen when I'm on the LAN. I tried changing the firewall rule from the "WAN" interface to "Floating" on the rec of some youtube tutorial, which seemed to make it better, but it still disconnected overnight. I can't find anything in the logs that has helped me so far, but maybe I'm not looking in the right place. The WireGuard tunnel to the other endpoint (server on the LAN) works flawlessly with the same phone and setup, which makes me think its a configuration issue on the OPNsense router.
I thought it might be a DNS issue, so I made the DNS endpoint on my phone the WAN IP address of my OPNsense router. That didn't help.
I tried the keepalive packets (server side), but that didn't help either.
Any advice?