OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 20.1 Legacy Series »
  • WireGuard interface assignment
« previous next »
  • Print
Pages: [1]

Author Topic: WireGuard interface assignment  (Read 2424 times)

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
WireGuard interface assignment
« on: February 16, 2020, 05:00:44 pm »
After long time pushing this out, I have started to migrate my road warriors over to WireGuard.
Quick question on the server side config:
The docu says:

Is that still necessary? The NAT setup also offers me the automatically created WireGuard Interface. Why can’t I use that instead of doing a new assignment?
Thanks!
Logged
System1: Qotom Q310G4
System2: APU2C4

mimugmail

  • Hero Member
  • *****
  • Posts: 6332
  • Karma: 435
    • View Profile
Re: WireGuard interface assignment
« Reply #1 on: February 16, 2020, 05:43:14 pm »
Can you post a screenshot what exactly you mean?
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
Re: WireGuard interface assignment
« Reply #2 on: February 18, 2020, 07:17:47 am »
Like this:

WG0 is a manually assigned Interface according to the docu. The other one is auto created I guess. Does it matter which one to use? Why would I need to manually assign an interface anyway?
Thanks a lot!
Logged
System1: Qotom Q310G4
System2: APU2C4

mimugmail

  • Hero Member
  • *****
  • Posts: 6332
  • Karma: 435
    • View Profile
Re: WireGuard interface assignment
« Reply #3 on: February 18, 2020, 09:13:31 am »
You only need to assign If you so policy routing. If you just want wg Client reach the internet, unassign and use WireGuard net
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
Re: WireGuard interface assignment
« Reply #4 on: February 18, 2020, 03:49:22 pm »
thanks a lot, that answers the question. Might be worth adapting the documentation.
Logged
System1: Qotom Q310G4
System2: APU2C4

mimugmail

  • Hero Member
  • *****
  • Posts: 6332
  • Karma: 435
    • View Profile
Re: WireGuard interface assignment
« Reply #5 on: February 18, 2020, 04:34:06 pm »
I think it's clearly stated that assignment is optional for policy based routing?
Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
Re: WireGuard interface assignment
« Reply #6 on: February 18, 2020, 04:51:31 pm »
Is that what you mean by “filter some streams out of it”? Ok. I read the chapter differently. For me it sounds like “ in any case where you want to route all traffic through vpn, assign an Interface manually.”  Sorry for being picky on this, but I just want to improve this with my feedback. 
Logged
System1: Qotom Q310G4
System2: APU2C4

mimugmail

  • Hero Member
  • *****
  • Posts: 6332
  • Karma: 435
    • View Profile
Re: WireGuard interface assignment
« Reply #7 on: February 18, 2020, 05:03:04 pm »
No, thats good, be picky :)
Indeed, it's some time ago when I wrote it down, maybe I'm wrong (was).

So can you verify it works also without assigning?

Logged
Twitter: mimu_muc
WWW: www.routerperformance.net
Support plans: https://www.max-it.de/en/it-services/opnsense/
Commercial Plugins (German): https://opnsense.max-it.de/

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
Re: WireGuard interface assignment
« Reply #8 on: February 18, 2020, 05:14:19 pm »
Thanks. I will.
Logged
System1: Qotom Q310G4
System2: APU2C4

skywalker007

  • Full Member
  • ***
  • Posts: 140
  • Karma: 5
    • View Profile
Re: WireGuard interface assignment
« Reply #9 on: February 20, 2020, 05:10:13 pm »
Quote from: mimugmail on February 18, 2020, 05:03:04 pm
No, thats good, be picky :)
Indeed, it's some time ago when I wrote it down, maybe I'm wrong (was).
So can you verify it works also without assigning?
It does work well without manual interface assignment.
Logged
System1: Qotom Q310G4
System2: APU2C4

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 20.1 Legacy Series »
  • WireGuard interface assignment
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2