Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
OPNSense multiple WAN links and NordVPN
« previous
next »
Print
Pages: [
1
]
Author
Topic: OPNSense multiple WAN links and NordVPN (Read 992 times)
lordxenu
Newbie
Posts: 6
Karma: 0
OPNSense multiple WAN links and NordVPN
«
on:
August 07, 2023, 03:26:24 am »
Hi
Quick question: Does anyone have a guide for OPNSense and NordVPN over multiple WAN links?
I have three WANs (Two cable links, one cable internet link) and a subscription to Nord.
I would also prefer to use Wireguard over OpenVPN if at all possible
Has anyone done this? and has a quick guide on how to do it ?
Thanks.
«
Last Edit: August 07, 2023, 03:28:03 am by lordxenu
»
Logged
willemr
Newbie
Posts: 1
Karma: 0
Re: OPNSense multiple WAN links and NordVPN
«
Reply #1 on:
August 09, 2023, 12:58:58 pm »
I don't have 3 WAN interfaces, but I do use multiple NordVPN tunnels. Each tunnel for a different purpose. I tried IPSec tunnels, but had some issues getting them to work. Also, it seems that not every NordVPN VPN server support IPSec. So I used the OpenVPN version (and
the tutorial they have
on that is more than adequate when you're familiar with VPN's).
The traffic is directed towards the NordVPN gateway in the firewall policy of the interface (all traffic on my guest network (interface) is forwarded to a OVPN tunnel, while another OVPN tunnel handles traffic for geofenced media in the US.
In your case you might need to do some static routing to make sure the correct WAN interface is used for a tunnel.
The issue I ran into is that they assign you a tunnel address from the 10.x.y.z range, and it's quite possible that you get the same IP address on different OVPN tunnels (which obviously won't work).
But I found a way around that by using different protocols and/or ports for the different tunnels. So far, when I use TCP over 443 I get an IP adres from the 10.8.y.z. range and UDP over 1194 gives me a 10.7.y.z address.
So that's something you need to watch out for.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
OPNSense multiple WAN links and NordVPN