OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Virtual private networks »
  • wireguard point to point guidance
« previous next »
  • Print
Pages: [1]

Author Topic: wireguard point to point guidance  (Read 1610 times)

nikkon

  • Jr. Member
  • **
  • Posts: 97
  • Karma: 3
    • View Profile
wireguard point to point guidance
« on: February 09, 2022, 09:37:16 am »
Hello,

Did anyone managed to set a point-to-point Wireguard VPN?
Can you please point me to some docs (the one on opnsense is incomplete i believe)

Thanks
Logged
DEC750 Deciso

Greelan

  • Hero Member
  • *****
  • Posts: 962
  • Karma: 66
    • View Profile
Re: wireguard point to point guidance
« Reply #1 on: February 09, 2022, 10:01:58 am »
https://www.thomas-krenn.com/en/wiki/OPNsense_WireGuard_VPN_Site-to-Site_configuration
Logged

nikkon

  • Jr. Member
  • **
  • Posts: 97
  • Karma: 3
    • View Profile
Re: wireguard point to point guidance
« Reply #2 on: February 09, 2022, 11:37:31 am »
thanks for sharing this.
let me go through this and see how it turns out :)
Logged
DEC750 Deciso

nikkon

  • Jr. Member
  • **
  • Posts: 97
  • Karma: 3
    • View Profile
Re: wireguard point to point guidance
« Reply #3 on: February 10, 2022, 09:37:48 am »
it works. the tunnel is up. the interface has been created.
Now I need to figure out how to route traffic through the tunnel

thank you
Logged
DEC750 Deciso

chemlud

  • Hero Member
  • *****
  • Posts: 2052
  • Karma: 94
    • View Profile
Re: wireguard point to point guidance
« Reply #4 on: February 10, 2022, 09:51:47 am »
The IP (-ranges) in the config will be accessed via the tunnel. try to reach a smb share or open ssh or whatever with the remote IP in the config and it should work...
Logged
kind regards
chemlud
____
"The price of reliability is the pursuit of the utmost simplicity."
C.A.R. Hoare

Greelan

  • Hero Member
  • *****
  • Posts: 962
  • Karma: 66
    • View Profile
Re: wireguard point to point guidance
« Reply #5 on: February 10, 2022, 10:15:33 am »
Exactly. Should be like accessing it locally
Logged

nikkon

  • Jr. Member
  • **
  • Posts: 97
  • Karma: 3
    • View Profile
Re: wireguard point to point guidance
« Reply #6 on: February 10, 2022, 10:29:55 pm »
something doesn't match

the tunnel is up:
peer: VSS+lopy56*********
  endpoint: 24.4.223.185:51823
  allowed ips: 10.100.92.0/31, 192.168.123.0/24
  latest handshake: 23 seconds ago
  transfer: 2.88 MiB received, 2.87 MiB sent

Firewall A internal networks 172.16.10.0/24, 172.16.20.0/24
Firewall B internal network 192.168.123.0/24
Tunel network is : 10.100.92.0/31

without any additional fw rules ping fails

ping 192.168.123.1                                                       
PING 192.168.123.1 (192.168.123.1): 56 data bytes
Request timeout for icmp_seq 0

With the additional rule where I define the gateway same behaviour

Firewall A rules on Lan:
   IPv4 *   *   *   FirewallBLan    *   WIREGUARD_GW   *   FW B LAN access VPN
where FirewallBLan is Firewall B (192.168.123.0/24)

What am I missing?

« Last Edit: February 11, 2022, 01:32:23 pm by nikkon »
Logged
DEC750 Deciso

nikkon

  • Jr. Member
  • **
  • Posts: 97
  • Karma: 3
    • View Profile
Re: wireguard point to point guidance - solved
« Reply #7 on: February 17, 2022, 03:12:28 pm »
It can be closed
I made a mistake when I added the route.
all works now
thank you
Logged
DEC750 Deciso

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Virtual private networks »
  • wireguard point to point guidance
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2