Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
19.7 Legacy Series
»
NAT Rules relating to Wireguard Interfaces
« previous
next »
Print
Pages: [
1
]
Author
Topic: NAT Rules relating to Wireguard Interfaces (Read 2013 times)
jf5876
Newbie
Posts: 16
Karma: 0
NAT Rules relating to Wireguard Interfaces
«
on:
August 26, 2019, 04:44:58 pm »
Hi!
I've setup wireguard with two clients, one being 172.20.1.1. I put in some NAT rules to allow this client out to the internet, however, the traffic is going out the WAN interface without being NAT'd first.
--
10:40:54.680981 IP 10.20.1.1.37352 > 8.8.8.8.53: 10996+ A? audio-sv5-t1-1-v4v6.pandora.com. (49)
10:40:54.681100 IP 10.20.1.1.45138 > 8.8.8.8.53: 28973+ A? android-tuner.pandora.com. (43)
10:40:54.681178 IP 10.20.1.1.42111 > 8.8.8.8.53: 12703+ A? clients4.google.com. (37)
10:40:54.681264 IP 10.20.1.1.42743 > 8.8.8.8.53: 18097+ A? clients4.google.com. (37)
10:40:54.681343 IP 10.20.1.1.5269 > 8.8.8.8.53: 1405+ A? clients4.google.com. (37)
10:40:54.681747 IP 10.20.1.1.32947 > 8.8.8.8.53: 60937+ A? clients4.google.com. (37)
10:40:55.011681 IP 10.20.1.1.47250 > 8.8.8.8.53: 25109+ A? sirocco.accuweather.com. (41)
--
I've tried moving the rule, changing the ip address, etc. to no change.
Any help would be appreciated :-)
Jeff
Logged
mimugmail
Hero Member
Posts: 6753
Karma: 494
Re: NAT Rules relating to Wireguard Interfaces
«
Reply #1 on:
August 26, 2019, 07:35:42 pm »
Did you assign an interface?
Logged
WWW:
www.routerperformance.net
Support plans:
https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German):
https://opnsense.max-it.de/
jf5876
Newbie
Posts: 16
Karma: 0
Re: NAT Rules relating to Wireguard Interfaces
«
Reply #2 on:
August 27, 2019, 02:31:22 pm »
I did assign an interface, but deleted it thinking it was unnecessary, and it honestly is unnecessary once it's setup.
I did figure out my problem though, I assigned the client address so far away from the tunnel address, I had my NAT rule incorrect.
I changed the ip address of the client to fall in line with the subnet I chose, and it works just fine now.
:-)
Logged
mimugmail
Hero Member
Posts: 6753
Karma: 494
Re: NAT Rules relating to Wireguard Interfaces
«
Reply #3 on:
August 27, 2019, 02:51:37 pm »
Great!
Logged
WWW:
www.routerperformance.net
Support plans:
https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German):
https://opnsense.max-it.de/
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
19.7 Legacy Series
»
NAT Rules relating to Wireguard Interfaces