Wireguard site-to-site no handshake

Started by Jared, September 12, 2024, 06:53:46 PM

Previous topic - Next topic
Hi All
I'm having some trouble getting a wireguard site-to-site connection working; wireguard is enabled and configured on each side but neither shows any handshake or traffic. Both of the WAN addresses are static and public. Here are the diagnostic steps I have take so far:

  • Tested networking between the WAN addresses on the two sites using both ICMP and TCP socket tests, both pass
  • Rebuilt the tunnel using public keys without special characters
  • Ran firmware Health audit
  • Stoped and started Wireguard service using every means available as well as rebooting both firewalls
  • Ran wg command in shell, both sides show appropriate configs
  • Ran packet captures on both WAN ports filtered to UDP and Wireguard port, shows no traffic
Anyone have any ideas what I am missing here? 

My colleague figured it out: assigning the wg0 interface under Interfaces - Assignments and then enabling it immediately fixed the issue. Oddly enough, this was only required on one end of the tunnel; Wireguard on the other OpnSense device worked fine without this fix.