hm, ok... please post a screenshot of your LAN FW rules
I know this is hardship for you. I am newbie with opnsense. I have a couple days installed.I am sorry about that.
Quote from: novel on November 25, 2023, 09:34:35 pmI know this is hardship for you. I am newbie with opnsense. I have a couple days installed.I am sorry about that.No problem... I am also no expert in networking or OPNsense...For the moment I have no idea where the problem is located...VPN is up and runningRouting for 8.8.4.4 (GW monitoring) is workingRouting for LAN clients is not working.... Routing by FW rule is ok... NAT issue?Please post a screesnhot of your outbound NAT overview.If this is fine, I am out of ideas, but maybe then we should try routing via alias in next step...... changing gateway priority is no option for me...
Do a tcpdump on the wg interface on the VPS side, and then on the external interface on the VPS side filtering on the source address of the internal LAN system. If the packets pass through the tunnel as intended - that's what we want to check - then possibly outbound NAT on the VPS side is not working as intended.
tcpdump -n -i wg0 icmp
If the wireguard interface on your VPS is wg0, then with the VPN active do a ping 8.8.8.8 on some internal client and at the same time as root on the VPS:Code: [Select]tcpdump -n -i wg0 icmpIf the interface is not wg0, then adapt accordingly.If you see the packets from the internal client, then the VPN tunnel is ok. If you don't it's a problem with the tunnel.Assuming you see the packets then repeat the procedure but instead of wg0 use the external interface of your VPS (eth0 or similar).
oops... I am late, so much happened last 15 minutes...Changing GW priority (or removing WAN GW) was what I wanted to prevent.This is a workaround for the routing issues we have, but not a proper way to go.However... is everything now working so far?
So it's working now. Great! What did you expect but something in the 100 ms range? You are tunneling to a different country, aren't you.
Yes , It working, but I disabel wan_dhcp to work. It is not correct way...How to fix it?
Quote from: novel on November 25, 2023, 10:45:19 pmYes , It working, but I disabel wan_dhcp to work. It is not correct way...How to fix it?For me, this is not the proper way. Maybe just a matter of mind, I don't know, never tried / tested this...Connection to VPN is now still established... but what will happen after connection loss / reboot? Without WAN GW OPNsense WG client will not be able to connect... will it?Changing priority instead of disabling WAN GW would be better, but -as said maybe a matter of mind- not the righteous way to go...
