Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wireguard Site-to-Multisite Redirect Host problem

    Scheduled Pinned Locked Moved WireGuard
    1 Posts 1 Posters 147 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pasl
      last edited by

      Hello

      I configured 3 sites by following the procedure in the guide [https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-s2ms.html](link url).

      The difference is that my main site also has a segment that must be accessible from satellite sites.

      HQ

      • list itemTunnel IP 10.250.0.1
      • Local Network 10.10.4.0 /23

      SatA

      • list itemTunnel IP 10.250.0.2
      • Local Network 10.20.4.0 /23

      SatB

      • list itemTunnel IP 10.250.0.3
      • Local Network 10.30.4.0 /23

      Currently everything works. I can PING from SatelliteA to HQ, SatelliteB to HQ and SatelliteA to SatelliteB.

      However, I try to determine if the following behavior is normal.

      When I ping SatA -> SatB or vice versa I receive a "Redirect Host".

      FROM SAT-A to SAT-B
      
      Ping 10.30.4.1
      PING 10.30.4.1 (10.30.4.1): 56 data bytes
      92 bytes from 10.250.0.1: Redirect Host(New addr: 10.250.0.3)
      Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
      4 5 00 0054 07da 0 0000 3f 01 5ab5 10.250.0.2 10.30.4.1
      

      Yet I am able to make a direct ping from SatA -> 10.250.0.3 (IP tunnel siteB) without redirect.

      I tried to create a 2nd gateway on SiteA that goes to 10.250.0.3 for the local segment of SiteB, but strangely when I ping I always have the same answer of 10.250.0.1. As if the route was not taken into account.

      Does anyone know if the redirect is a normal behavior of the Site-to-Multisite wireguard?

      Thanks

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.