Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Wireguard and OSPF
« previous
next »
Print
Pages: [
1
]
Author
Topic: Wireguard and OSPF (Read 776 times)
Lokutos
Newbie
Posts: 10
Karma: 0
Wireguard and OSPF
«
on:
January 15, 2023, 03:36:23 pm »
Just searching for agreement or better solution ;-)
I have
Site A / Site B / Site C (and many others)
now i want to switch from IPsec top WireGuard.
Current config is
every Firewall has one Side2Side IPsec VPN with a routed based Phase 2
for this Side2Side, I have configured an Interface with no IP Config.
This results in the end
Side A Site B Site C
10.0.0.1 10.0.0.2 10.0.0.3
and IPSec Tunnels from
Site A 10.0.0.1 <-> Site B 10.0.0.2
Site B 10.0.0.2 <-> Site C 10.0.0.3
Site C 10.0.0.3 <-> Site A 10.0.0.1
And over all, OSPF working...
Now i want to switch to WireGuard
so in my understanding i have to create one Tunnel per connection like IPsec before
but i have to assign the ip in the Interface -> Witch result in not possible because IP can only assign to one Interface.
In the other way that i just use one WireGuard setting and add all Endpoints/Other sites to it, it's not possible to add the 0.0.0.0/0 (or required 224.0.0.0/24) to all endpoints.
So is it right that i have to use one WireGuard Tunnel each connection
and have to use a different IP local for each connection?
This result in
and IPsec Tunnels from
Site A 10.0.0.1 <-> Site B 10.0.0.2
Site B 10.0.0.3 <-> Site C 10.0.0.4
Site C 10.0.0.5 <-> Site A 10.0.0.6
And get way complicated for more than 3 sites.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Wireguard and OSPF