[WIREGUARD] Site to Site doesn't work

Started by Blacktime2, May 27, 2024, 05:54:57 PM

Previous topic - Next topic
Hello team,

I've been trying to set up a Wireguard tunnel between my two firewalls but I've run into a lot of problems and it's complicated to debug it.
You can see my network map in the attachment.

After configuring the tunnel, I can see that packets are being exchanged between the 2 firewalls, but the tunnel doesn't seem to be going up.

Here's everything I've configured:
- Instances on the 2 FWs
- Peer on the 2 FWs
- Open a UDP port on both sides
- Authorize the right IP ranges + open flows on the "Wireguard (Group)" interface
- Add a keep alive of 25 for NAT

Any ideas? It seems I'm not the only one with this problem on the forum. Is it a bug in the new version of wireguard?

Thanks to all those who will take the time to read me !


Without your full wireguard configuration (minus private keys) and all corresponding firewall rules it is pretty hard to help you.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Thank you for your reply. Here you can see the Wireguard configuration as an attachment.

The remote networks should be /24 or whatever they are, not /32 (allowed IPs).

Okay, I just changed. But that's not the cause of the problem.