Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Wireguard No Handshake
« previous
next »
Print
Pages: [
1
]
Author
Topic: Wireguard No Handshake (Read 255 times)
breimer273
Newbie
Posts: 6
Karma: 0
Wireguard No Handshake
«
on:
November 06, 2024, 03:34:10 pm »
Hello, new OPNSense user here. Having some trouble getting a wireguard connection configured. I have followed the guide here:
https://docs.opnsense.org/manual/how-tos/wireguard-client.html
Then I used the peer generator to create the config for my client (wireguard app on ios) but the handshake does not complete.
I have allowed the firewall for port 51820, and I have confirmed that the firewall is allowing the traffic by looking at the logs.
I've attached some screen shots of my OPNSense config. I'll edit the post and add my client config when I get to it.
Logged
breimer273
Newbie
Posts: 6
Karma: 0
Re: Wireguard No Handshake
«
Reply #1 on:
November 06, 2024, 03:37:53 pm »
Have attached my client configuration screenshot to this post
Logged
wirehire
Full Member
Posts: 148
Karma: 5
Re: Wireguard No Handshake
«
Reply #2 on:
November 07, 2024, 09:57:55 am »
have you tried with another key pair?
the log in ios , say no handshake?
you can see udp pakets in the firewall log?
which ips are in the allowed config from your ios device?
Logged
breimer273
Newbie
Posts: 6
Karma: 0
Re: Wireguard No Handshake
«
Reply #3 on:
November 07, 2024, 01:27:47 pm »
I did try making the key pair a couple of times. I used the peer generator a couple of times and also made it manually in the wireguard client on ios.
Allowed IPs is 0.0.0.0/0, ::/0
I do see 1 packet in the firewall log. See screenshot.
I'm also attached the log from my client. But the error says that it did not receive
Does it make a difference that my VPN network is 10.0.0.0/24 and my other network is 192.168.1.0/24? Maybe there is some traffic that isn't going through because the 192.168.1 subnet isn't allowed somehow?
Logged
wirehire
Full Member
Posts: 148
Karma: 5
Re: Wireguard No Handshake
«
Reply #4 on:
November 07, 2024, 01:35:20 pm »
for the handshake ,it needs only the wg ips/net
can you post the full config from the ios device , without priv keys?
Logged
breimer273
Newbie
Posts: 6
Karma: 0
Re: Wireguard No Handshake
«
Reply #5 on:
November 07, 2024, 01:44:19 pm »
Here's the log from the client
EDIT: Modified the log file to only include this connection.
«
Last Edit: November 07, 2024, 01:56:32 pm by breimer273
»
Logged
breimer273
Newbie
Posts: 6
Karma: 0
Re: Wireguard No Handshake
«
Reply #6 on:
November 07, 2024, 01:50:50 pm »
Full config
https://nextcloud.reimerfamily.net/s/KosxLo6aLw7M4PL
Logged
breimer273
Newbie
Posts: 6
Karma: 0
[solved] Re: Wireguard No Handshake
«
Reply #7 on:
November 07, 2024, 02:27:23 pm »
Well, I appear to have corrected the issue. The solution appears to be.... a reboot.
I tried restarting the wireguard service multiple times. But for some reason that wasn't working. A full reboot of the device and everything is working great.
Thanks for the help!
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
24.7 Production Series
»
Wireguard No Handshake