Nested WG Tunnel

[derbert]

Hello,
I am trying to set up OPNsense to serve as a WG server behind a private network wich is public through another wg tunnel to a vps.
So the tunnel from the vps to the so called 'DMZ' net is established by wg on public IPv6 address. This is working so far. Now I try to establish a tunnel to OPNsense on IPv4 through the IPv6 tunnel. the mobile client is using the public IPv4 of the vps on port 51820. OPNsense wg is listening on this port.
The mobile client reaches OPNsense on the interface address of the IPv6 tunnel.
The problem is, as far as I can see, OPNsense is responding to the mobile clients wg connection attempt on the WAN interface and therefor is not using the IPv6 tunnel interface. The response is not passing through to the mobile client.
Is there a possibility to tell opnsense to use the IPv6 tunnel interface to respond to the mobile clients connection attempt?

[derbert]

switched to openvpn. Working flawlessly nested in the wireguard ipv6 tunnel.