Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    feature suggestion: Auto configuration of wireguard bridges between pfsense installs

    WireGuard
    3
    8
    266
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      wildcarde last edited by

      I suggested this on reddit and it was requested that I make an entry here so it can be tracked / commented on / evaluated. So I'm posting it here as a feature suggestion. It would be super helpful to be able to point two pfsense at each other in some manner and automatically(ish?) get the configuration right in wireguard. I'm not sure exactly what this would look like but figured I should propagate it over here in case it's workable.

      1 Reply Last reply Reply Quote 1
      • stephenw10
        stephenw10 Netgate Administrator last edited by

        You might also add it as a feature request here:
        https://redmine.pfsense.org

        1 Reply Last reply Reply Quote 0
        • jimp
          jimp Rebel Alliance Developer Netgate last edited by

          That's unlikely to happen in an automated way.

          If the two could already communicate in a secure way to do this, why would they need a VPN? If there is no VPN, then there is no way to securely transfer the configuration.

          Adding a WireGuard tunnel on both is just a matter of a few clicks in current builds. It's not exactly going to need a lot of hand-holding and not much could be automated or put behind a wizard.

          W 1 Reply Last reply Reply Quote 0
          • W
            wildcarde @jimp last edited by

            @jimp It would seem useful to at least enable the 'scan from qr code' mode for setting up mobile devices, the android application at the least has this feature available.

            But more broadly, we run a number of small/large pfsense devices floating around a university network. While I can remotely manage the web interface no problem, that's decidedly separate from joining together say, management networks separated by several vlans into one private encrypted space that we can attach to for accessing idracs, switch management consoles, etc.

            1 Reply Last reply Reply Quote 0
            • stephenw10
              stephenw10 Netgate Administrator last edited by

              Yeah the QR code for mobile client setup is a different matter. We are already looking at that, it's discussed in another thread here.

              Steve

              1 Reply Last reply Reply Quote 0
              • jimp
                jimp Rebel Alliance Developer Netgate last edited by

                Sounds like they want pfSense to read someone else's QR code and parse it out, and that is highly unlikely to happen. It would be a lot more dev work and dependencies to feed a QR code into pfSense (and for us to carry image processing libraries) than it would to just enter the handful required config fields that you only have to do once.

                W 1 Reply Last reply Reply Quote 0
                • stephenw10
                  stephenw10 Netgate Administrator last edited by

                  Ah I read that as having pfSense generate a QR code that the Android WG app can use to read in the required settings. Which seems like a far more practical use case.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • W
                    wildcarde @jimp last edited by

                    @jimp I was in fact talking about having pfsense present a qr code you could scan on your phone.

                    But it would be handy to have that same data as something you can cut/paste in a text format for joining two pfsense boxes. I have less of an idea what that would look like.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post

                    Products

                    • Platform Overview
                    • TNSR
                    • pfSense Plus
                    • Appliances

                    Services

                    • Training
                    • Professional Services

                    Support

                    • Subscription Plans
                    • Contact Support
                    • Product Lifecycle
                    • Documentation

                    News

                    • Media Coverage
                    • Press
                    • Events

                    Resources

                    • Blog
                    • FAQ
                    • Find a Partner
                    • Resource Library
                    • Security Information

                    Company

                    • About Us
                    • Careers
                    • Partners
                    • Contact Us
                    • Legal
                    Our Mission

                    We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

                    Subscribe to our Newsletter

                    Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

                    © 2021 Rubicon Communications, LLC | Privacy Policy