16
22.7 Legacy Series / Re: OPNsense and Proton VPN (Wireguard)
« on: November 01, 2022, 01:02:35 am »
I was able to get OPNsense and ProtonVPN working, but, it wasn't as easy as Mullvad, or any other WireGuard setup.
The primary differences that I encountered -- basing my setup off of the Mullvad example in the Docs for OPNsense, including https://docs.opnsense.org/manual/how-tos/wireguard-client-mullvad.html and https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html were:
It's the setting of the Gateway IP (on your OPNsense box) in a few places that is important to get right, as well as all the other steps outlined in the Mullvad example. It's a lot of steps, and read carefully as there are a few gotchas.
In the end, I was able to get it working just fine, but it was more picky than other setups.
The primary differences that I encountered -- basing my setup off of the Mullvad example in the Docs for OPNsense, including https://docs.opnsense.org/manual/how-tos/wireguard-client-mullvad.html and https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html were:
- Setting the local IP address of my Gateway to 10.2.0.1 - but note that this breaks some things as ProtonVPNs setup uses this IP address for the DNS server. If you need their DNS for your WG setup, you may want to set it to 10.2.0.250 or something else not likely to cause an issue
- ProtonVPN, unlike Mullvad or other WG implementations, does not give you your public key. It does give you the private key in the web UI briefly, but, you WILL need to use the "wg pubkey" command (cli, on your OPNsense or wherever else you have WireGuard installed, to obtain the public key from the private key and enter BOTH into OPNsense
It's the setting of the Gateway IP (on your OPNsense box) in a few places that is important to get right, as well as all the other steps outlined in the Mullvad example. It's a lot of steps, and read carefully as there are a few gotchas.
In the end, I was able to get it working just fine, but it was more picky than other setups.