Wireguard client not reconnecting after WAN drop

[Blackrose]

Hello there!

I use OPNsense as a router with client connection to an external VPN provider.

For various reasons, I experience short WAN connection drops at home, and my ISP struggle to fix that.

When these drops happen, all my devices loose connection to WAN (via VPN) even after the connection is back to normal state. After a bit of diagnosis, it seems that Wireguard struggle to reconnect after the connection drop, so I have to manually restart the wg service to restaure connection to all the devices.

Is there a way to force wireguard reconnecting to the distant vpn provider server? Or maybe to check if connection is still active every x seconds and force reconnection to VPN ?

Thank you for helping

[meyergru]

There is a cronjob for that. You just have to enable and run it. It checks if the wireguard connection is stale (e.g. if the IP address has changed, because wireguard does not re-check DNS) and restarts the connection if neccessary.

[Blackrose]

Are you talking about this cron ?
I have it active but it does not work.
Do I set it up correctly with the right parameters (see screenshot) ?

[meyergru]

Yes, as you configured it, it will be called every miniute, which is a bit much IMHO, but it should do.

However, it depends on how the VPN connection is being initiated. If your WAN IP drops and the other side does not re-initiate the connection, you are out of luck.

[chemlud]

The cron job is for lost connections due to changes in IP of remote WG "partner" (there is stricly speaking no host/client, except for "dynamic" hosts, which rely on the connection to be established from the remote "server"). Therefore the "DNS" in the job name, as the IP of the "partner" will be resolved.

If the interruption is caused by something else I'm unsure the cron job will help...

[Blackrose]

Thank you for your input.

Unfortunately, I can confirm that this Cron job does not solve the issue...

Is there a way to create a custom cron / script to do that ?

Sincerly,

[Ketanest]

I have a similar issue:

I have 2 WAN connections (DSL and LTE). Wireguard peers are configured with 10 seconds keepalive. But if the DSL connection fails it doesn't reconnect. I have to restart the Wireguard services for the concerning connections manually.

[chemlud]

Thank you for your input.

Unfortunately, I can confirm that this Cron job does not solve the issue...

Is there a way to create a custom cron / script to do that ?

Sincerly,

Cron jobs can be created this way:

https://forum.opnsense.org/index.php?topic=10740.msg49334#msg49334