Messages

121

Virtual private networks / Re: Wireguard Selective Routing!

« on: August 29, 2022, 06:41:52 am »

Easy to test if it is DNS by doing a traceroute to 8.8.8.8

122

Virtual private networks / Re: Wireguard multiple endpoints - adjacent IP addresses

« on: August 21, 2022, 01:34:50 pm »

Yes - see the note in that section of the how-to

123

22.7 Legacy Series / Re: [SOLVED]Need help understanding firewall rules

« on: August 07, 2022, 11:50:19 pm »

There's nice help text on the Direction setting to assist with reminding you

124

22.7 Legacy Series / ipv6 wireguard Nat help

« on: August 07, 2022, 11:33:36 pm »

You need to give OPNsense an actual address in the local config - eg {prefix}::1/64 (substituting your actual prefix ofc)

At the moment you've only specified a subnet with no address

Also not sure whether OPNsense has issues parsing IPv6 address notation that hasn't been shortened in accordance with the RFC. So suggest doing that too on the endpoint IPs (collapsing the 0000s etc)

125

22.7 Legacy Series / Re: ipv6 wireguard Nat help

« on: August 04, 2022, 09:53:32 am »

I'd suggest ULAs configured for the tunnel and otherwise set up in accordance with the how-to (https://docs.opnsense.org/manual/how-tos/wireguard-client.html) should achieve what you want. NAT for the ULAs should work fine

126

Virtual private networks / Re: Wireguard handshake

« on: July 11, 2022, 12:18:08 pm »

And your WG subnet is totally different to your LAN, right? No overlapping subnets?

127

Virtual private networks / Re: Wireguard handshake

« on: July 11, 2022, 12:15:55 pm »

Have you applied that second rule? The screenshot still says it hasn't been applied

128

Virtual private networks / Re: Wireguard handshake

« on: July 11, 2022, 10:13:08 am »

Looks OK

Is unbound actually listening on the WG interface? You've specified that for DNS on the mobile

What about your WAN rule and WG interface rules?

129

General Discussion / Need help understanding VLAN rules

« on: July 11, 2022, 12:59:25 am »

Edit: my bad, I shouldn't answer posts while doing 5 other things. xD Your LAN rule should allow access. What rules have you put on the MGMT interface?

Otherwise could be a switch issue

130

Virtual private networks / Re: Wireguard handshake

« on: July 11, 2022, 12:56:08 am »

You will need to post your actual configs on OPNsense and mobile phone. The screenshots above give very little useful info

BTW, the web version of the how-to is easier on the eye xD

https://docs.opnsense.org/manual/how-tos/wireguard-client.html

131

General Discussion / Re: Stops Routing to internet when Upgrading 22.1.9

« on: July 04, 2022, 11:34:50 pm »

Firewall rules on the VLAN interfaces? DNS issue?

132

Virtual private networks / Re: OPNsense using WAN instead of Wireguard gateway group

« on: June 25, 2022, 10:35:43 am »

Maybe you need this floating rule: https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html#step-9-configure-routing

133

Virtual private networks / Re: Routing issues with far gateway over VPN

« on: June 19, 2022, 03:37:16 pm »

Okaaay…

134

Virtual private networks / Re: Routing issues with far gateway over VPN

« on: June 19, 2022, 07:50:08 am »

As per the help text, a gateway that exists outside of the interface subnet.

135

Virtual private networks / Re: WireGuard VPN - Connecting to IPs on LAN not working with the exception of GW

« on: June 13, 2022, 10:37:23 pm »

That’s what I mean. You’ve given your phone an IP in your LAN subnet. It should instead be something like 10.1.1.2/32.

And the tunnel address in the OPNsense local config should be 10.1.1.1/24