Topics

Hello,

I really don't have idea how to do but I am sur it's possible.

I have my router on OPNsense connected via wireguard VPN to 2 servers.
both are in the same ip range: 192.168.1.0/24
Today with route and gateway I can access on one subnet without problem.

I would like if I want ping the device 192.168.1.123 on gw1 I use this address 192.168.2.123 and for the same device on gw2 192.168.3.123.
my subnet is 10.3.x.x/24

Any idea?

Hi,

On my router I have some interfaces:
The WAN
The WG-OZ it's VPN tunnel connected with another OPNSENSE in another country with his own remote LAN 10.2.1.x

The LAN 10.3.1.x
The PVE 10.3.2.x

I have a static route to use the GW with VPN for the subnet 10.2.1.0/24.

From LAN I have access to internet, the LAN subnet 10.3.1.x, the PVE subnet 10.3.2.x and remote LAN 10.2.1.x
From PVE I have access to internet, his own subnet 10.3.2.x and that's all.

My problem is I would like LAN and PVE have the same behaviour. From PVE access to remote LAN 10.2.1.x.

Any idea?

Bonjour,

suivant la CNIL et surtout le passage sur Les données techniques:

Les données techniques permettant d'identifier la source de la connexion ou relatives aux appareils utilisés (adresse IP et port associé, numéro de l'identifiant, numéro d'identification, numéro de téléphone) doivent être conservées pendant un délai de 1 an.

Les données concernant la sécurité des réseaux et des installations
Les données suivantes peuvent être conservées pendant un délai de 3 mois maximum :

les données permettant d'identifier l'origine de la communication ;
les caractéristiques techniques ainsi que la date, l'horaire et la durée de chaque communication ;
les données techniques permettant d'identifier le ou les destinataires de la communication ;
les données relatives aux services complémentaires demandés ou utilisés et leurs fournisseurs.

https://www.cnil.fr/fr/fournir-un-acces-internet-public-quelles-obligations

Que dois je logger ? Je log pour l'instant les query et reply du service Unbound DNS. Une autre suggestion?

Gautier

Hi,

I have SIP phone on OVH with the sbc6.fr.sip.ovh domain. But where I actually live I cannot access to this domain.
Until now I use SIP phone connected to my router with redirection to another router in France via wireguard and everything was ok.
But this phone die and I would like to use softphone without redirect full ip flow but just the SIP.

If I use openvpn to connect to the router in France, I get my connection.

How should I do?

I have this problem with fresh intsall


root@lithium:~# ping -c3 google.com

PING google.com (216.58.213.110) 56(84) bytes of data.

64 bytes from sof04s03-in-f14.1e100.net (216.58.213.110): icmp_seq=1 ttl=117 time=35.6 ms

64 bytes from lhr25s02-in-f110.1e100.net (216.58.213.110): icmp_seq=2 ttl=117 time=35.3 ms

64 bytes from sof04s03-in-f14.1e100.net (216.58.213.110): icmp_seq=3 ttl=117 time=35.7 ms


--- google.com ping statistics ---

3 packets transmitted, 3 received, 0% packet loss, time 2003ms

rtt min/avg/max/mdev = 35.293/35.538/35.689/0.175 ms



root@lithium:~# curl https://ipleak.net/json/

curl: (28) Failed to connect to ipleak.net port 443 after 135153 ms: Couldn't connect to server


For apt update same probleme.



My architecture:

PVE with OPNsense VM.

LAN on Vmbr0


This computer, phone etc are connected in DHCP via Vmbr0 without problem.


I don't know if it's PVE or OPNsensewith bad settings.


Help

Re,

Here my network https://ibb.co/nbqbfvd

The connection between the two firewall is made by wireguard with this tuto
https://docs.opnsense.org/manual/how-tos/wireguard-s2s.html

PCs are connected on local internet without problems and access to the server via static route.
What I would like is the PC3 is connected to remote internet.
I try with this tuto but without success https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html

I am sure I miss something or I don't understand the concept.

Voilà, voila

Hi,

We don't know why but I cannot connect at work with their VPN when I am in Azerbaijan. It's work when I am in France.
I have also personnal wireguard tunnel to my home server in France and I can connect without problem. I have declared 2 gateways and one static route to access remote LAN from oversea.
I would like to route the VPN traffic (or all but just this pc) to the wg gateway.

I really don't understand where to start.

Bonjour,

Sur mon routeur tp link je mets Dynamic IP et ca fonctionne. je n'arrive pas à trouver l'équivalence sur OPNsense, j'ai essayé dhcp sans résultat.

Une idée ?