Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wireguard interface assignment II

    Scheduled Pinned Locked Moved WireGuard
    5 Posts 2 Posters 52 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F Offline
      FSC830
      last edited by FSC830

      Hi,
      about 2 years ago I tried to setup a site-2-site VPN with WG between pfSense and a Fritzbox.
      But due the to weird Fritzbox WG implementation I dismissed that after several fails and continued to use IPsec.
      Now I have a new site with a new Fritzbox and again I am trying to setup WG.
      But I stuck at one point: as far as I remember during my trials 2 years ago, I was able to use for both tunnels the same interface assignment:
      dba32db1-75fa-4d24-9d50-d78ee39f8caa-grafik.png
      But now I cant set the VPNWG on tun_wg1 too, no chance.
      Do I remembering wrong?
      Or was there change in pfSense/WG package?

      Regards

      Bob.DigB 1 Reply Last reply Reply Quote 0
      • Bob.DigB Offline
        Bob.Dig LAYER 8 @FSC830
        last edited by

        @FSC830 said in Wireguard interface assignment II:

        I was able to use for both tunnels the same interface assignment

        What both tunnels, you said you want to create one Tunnel, the other is IPSec.

        F 1 Reply Last reply Reply Quote 0
        • F Offline
          FSC830 @Bob.Dig
          last edited by FSC830

          @Bob.Dig

          Hi, thanks for reply.
          Both WG tunnels (tun_wg0/tun_wg1).
          No IPsec in the screenshot.

          Tunnel tun_wg0 is used for all my mobile peers and runs without issues.
          Now I want to create a 2nd WG tunnel (tun_wg1) to a remote Fritzbox as site-2-site connection.

          Regards

          Bob.DigB 1 Reply Last reply Reply Quote 0
          • Bob.DigB Offline
            Bob.Dig LAYER 8 @FSC830
            last edited by

            @FSC830 Then I wouldn't use the same interface for that in the first place. pfsense will route no problem if a mobile device needs to access something behind the fritzbox.

            1 Reply Last reply Reply Quote 0
            • F Offline
              FSC830
              last edited by FSC830

              Hi again,
              to be honest: I guess, I did not remember exactly what I did 2 years ago.
              May I was mistaken by the interface name opt2 because the SG-3100 has a physical port OPT1 and I mixed up physical and virtual names. 😵
              The goal was to use 2 different tunnels, one for the mobile clients and one for the site-2-site connection.
              And now all is running in that way 😊 .

              Regards

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.