Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
wireguard point to point guidance
« previous
next »
Print
Pages: [
1
]
Author
Topic: wireguard point to point guidance (Read 2933 times)
nikkon
Full Member
Posts: 124
Karma: 3
wireguard point to point guidance
«
on:
February 09, 2022, 09:37:16 am »
Hello,
Did anyone managed to set a point-to-point Wireguard VPN?
Can you please point me to some docs (the one on opnsense is incomplete i believe)
Thanks
Logged
DEC750 Deciso
Greelan
Hero Member
Posts: 1028
Karma: 72
Re: wireguard point to point guidance
«
Reply #1 on:
February 09, 2022, 10:01:58 am »
https://www.thomas-krenn.com/en/wiki/OPNsense_WireGuard_VPN_Site-to-Site_configuration
Logged
nikkon
Full Member
Posts: 124
Karma: 3
Re: wireguard point to point guidance
«
Reply #2 on:
February 09, 2022, 11:37:31 am »
thanks for sharing this.
let me go through this and see how it turns out
Logged
DEC750 Deciso
nikkon
Full Member
Posts: 124
Karma: 3
Re: wireguard point to point guidance
«
Reply #3 on:
February 10, 2022, 09:37:48 am »
it works. the tunnel is up. the interface has been created.
Now I need to figure out how to route traffic through the tunnel
thank you
Logged
DEC750 Deciso
chemlud
Hero Member
Posts: 2486
Karma: 112
Re: wireguard point to point guidance
«
Reply #4 on:
February 10, 2022, 09:51:47 am »
The IP (-ranges) in the config will be accessed via the tunnel. try to reach a smb share or open ssh or whatever with the remote IP in the config and it should work...
Logged
kind regards
chemlud
____
"The price of reliability is the pursuit of the utmost simplicity."
C.A.R. Hoare
felix eichhorns premium katzenfutter mit der extraportion energie
A router is not a switch - A router is not a switch - A router is not a switch - A rou....
Greelan
Hero Member
Posts: 1028
Karma: 72
Re: wireguard point to point guidance
«
Reply #5 on:
February 10, 2022, 10:15:33 am »
Exactly. Should be like accessing it locally
Logged
nikkon
Full Member
Posts: 124
Karma: 3
Re: wireguard point to point guidance
«
Reply #6 on:
February 10, 2022, 10:29:55 pm »
something doesn't match
the tunnel is up:
peer: VSS+lopy56*********
endpoint: 24.4.223.185:51823
allowed ips: 10.100.92.0/31, 192.168.123.0/24
latest handshake: 23 seconds ago
transfer: 2.88 MiB received, 2.87 MiB sent
Firewall A internal networks 172.16.10.0/24, 172.16.20.0/24
Firewall B internal network 192.168.123.0/24
Tunel network is : 10.100.92.0/31
without any additional fw rules ping fails
ping 192.168.123.1
PING 192.168.123.1 (192.168.123.1): 56 data bytes
Request timeout for icmp_seq 0
With the additional rule where I define the gateway same behaviour
Firewall A rules on Lan:
IPv4 * * * FirewallBLan * WIREGUARD_GW * FW B LAN access VPN
where FirewallBLan is Firewall B (192.168.123.0/24)
What am I missing?
«
Last Edit: February 11, 2022, 01:32:23 pm by nikkon
»
Logged
DEC750 Deciso
nikkon
Full Member
Posts: 124
Karma: 3
Re: wireguard point to point guidance - solved
«
Reply #7 on:
February 17, 2022, 03:12:28 pm »
It can be closed
I made a mistake when I added the route.
all works now
thank you
Logged
DEC750 Deciso
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
wireguard point to point guidance