OPNSense as VPN Server Only(One Leg)?

[kopling21]

Hi All,

it is possible to deploy opnsense as vpn server with only one leg ? if possible what role the one interface wan ?
and how about the 'private vpn ip address in the opnsense server' to connect to internal ?

Thanks

[Patrick M. Hausen]

I run this confuguration. OPNsense behind my Fritzbox router.

I only have a LAN interface, bridge0 with all 4 Gbit interfaces as members, so I don't need another small switch. Firewall is globally disabled, no NAT.

I run an IPSec tunnel to my company office and WireGuard to connect from remote when I am in the road.

Please sketch what you are trying to achieve and I can probably help. "VPN" is many different things ;)

[kopling21]

Hi pmhausen,

Great, thank for you reply. Indeed vpn is broadterm. Here's i attach what i want to achieve with 'one leg'. Just like openvpn server. 'Connected' wireguard vpn user, will get 10.19.95.10-20 ip, and with that ip will travel through environment.

Thanks