WureGuard issue after upgrade

[deans20]

Hello,

I upgraded to 24.7 (now on 24.7.1) and my WireGuard VPN seems to have issues. I'm using MullVad, and this worked great for a good year. But, something (perhaps upgrade to 24.1.x or 24.7) seems to have caused it to stop working. 

Set-up
 - OPNSense bare-metal on a Protectli VP2420
 - a few VLANs

As above, has been working fine but one of the recent upgrades / something seems to have upset the VPN connection.

What is the issue - WireGuard shows as connected and up with handshake, but my Client Devices can not use the VPN.

I have tried:

* I have tried recreating the Instance and Peer
* Checked the Interface and Gateway
* Restarted WireGuard and Rebooted the Router

Have assigned the wg0 interface, and added to Gateway. The Gateway is showing as Online.

Anybody else had similar issues?

What info would I need to share to help troubleshoot this issue? How can I narrow this down to DNS or VPN or Firewall etc issues?

[audun]

WireGuard shows as connected and up with handshake, but my Client Devices can not use the VPN.

It sounds like the VPN is working just fine, just that client devices can't exit through the VPN interface (wg0 or whatever). Every time I've had issues like this, it's been because there are firewall rules missing, so the traffic is being blocked.

Maybe you can try going to the live view of the firewall logs and based on IP or something check whether traffic is being blocked.

[jfenech]

Hi Check if you have

Firewall -> NAT -> Outbound.

Interface  = The WG Interface

Translation / Target = Interface Address

(I had a similar issue here -> https://forum.opnsense.org/index.php?topic=42147.0)