Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Opensense sends all traffic over wireguard interface
« previous
next »
Print
Pages: [
1
]
Author
Topic: Opensense sends all traffic over wireguard interface (Read 1117 times)
voidthewarranty
Newbie
Posts: 2
Karma: 0
Opensense sends all traffic over wireguard interface
«
on:
December 19, 2023, 10:00:13 am »
I was following this video by Jim's Garage
https://www.youtube.com/watch?v=UI5tO1hP2q8
to set up my wireguard instance.
After setting up the peer and linking it to the wireguard instance all ipv4 traffic starts being routed through that interface.
Firewall logs:
Without partner
https://imgur.com/a/nYRAxtV
With partner
https://imgur.com/a/DFsL6n6
Firewall Rules:
WAN
https://imgur.com/a/T8LjSs2
LAN
https://imgur.com/a/SyfT0rm
VPN
https://imgur.com/a/tkRGDtH
VPN(group)
https://imgur.com/a/Joy7SEo
Nat:
outbound
https://imgur.com/a/9kCFT9H
portforward
https://imgur.com/a/HOfh1j8
VPN config:
instance config
https://imgur.com/a/0L5b2H2
peer config
https://imgur.com/a/Ea8ACDf
I have dumped my config (and hopefully redacted it enough)
https://pastebin.com/RaNF3fUN
Any help is very appreciated
Logged
DEC670airp414user
Full Member
Posts: 162
Karma: 8
Re: Opensense sends all traffic over wireguard interface
«
Reply #1 on:
December 19, 2023, 10:58:50 am »
this is expected.
if you didn't create
alias of the devices you want, or don't want to travel over the tunnel
then nat the devices you want to go over the tunnel and choosing the correct interface
https://docs.opnsense.org/manual/how-tos/wireguard-client.html
https://docs.opnsense.org/manual/how-tos/wireguard-client-mullvad.html
https://docs.opnsense.org/manual/how-tos/wireguard-client-proton.html
https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html
Logged
voidthewarranty
Newbie
Posts: 2
Karma: 0
Re: Opensense sends all traffic over wireguard interface
«
Reply #2 on:
December 20, 2023, 12:22:29 am »
Yeah, that would do it. I have since changed the allowed IPs value under peer to the tunnel network.
I am now facing a new issue. My phone will not connect even though:
1. the pubkeys are correct
2. the firewall has a rule set
3. the service is running
One strange thing that I have noticed is only the first udp request will apear in the firewall. Any subsequent handshake requests will not be reported in the log. I know the handshakes are being send because I can see the data sent number increasing.
Any ideas?
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Opensense sends all traffic over wireguard interface