Wireguard Site-to-Site CG-NAT

[hidef]

If I rent a VPS server (public static ip) and my home connection is behind CG-NAT, is it possible to establish a site to site connection with wireguard to allow access to my home network and do port forwarding?  Is this the best solution?

[itngo]

You ever get this solved?

[chemlud]

only one end of the tunnel needs to be reachable (public IP), with dyndns you can set up a server for the tunnel and reach it from behind your CG NAT.

Or wait 5 min and the ipv6 fraction wants you to use ipv6 in any kind of configuration... ;-)

[itngo]

Thank you for the reply.
So I must have done something wrong as my tunnel never comes up on the "server" side.....

But there is also an orphaned wg0 on the server, cause WireGuard-Plugin was installed some month ago and was buggy... is there a way to completely clear any orphaned fireguard settings in opnsense?

[chemlud]

1. export config.xml and look for any remnants of wireguard config. remove. import edited config.

2. reset to factory (hard way).

[itngo]

1. export config.xml and look for any remnants of wireguard config. remove. import edited config.

2. reset to factory (hard way).

Thanks for the reply.
Is there no way to just look in the existing and used "config-file" anywhere?

[Greelan]

/conf/config.xml

[itngo]

Thx