Transit WG routing issue
-
I am trying to set up a Transit VPN from A to C over B, so A
B
C. I am using WireGuard and the connections A
B & B
C are working, just not transitively A
C. Everything else is explained in the diagram below, does anybody have any idea what could be going wrong?
-
@meray to recap:
- on A you got routes to BNet and VNet using wgB as gatway
- on B you got a route to VSub using wgB as gateway
- on B you got a route to ANet using wgA as gateway
- wgA, wgB and wgC have route/access to VNet
- wgB and wgC have also route/access to VSub (a subset of VNet)
- for wgA, peer B you set AllowedIPs to BNet, wgB and VNet (but not wgC?)
Questions:
- are the Wireguard endpoints assigned as interfaces in pfSense?
- are you doing NAT on Wireguard traffic?
- is C -> B -> A working and only A -> B -> C not?
- wgA has direct connection to VNet, why set the gateway to wgB?
- is there a route to wgC on A?
- what firewall rules have you set up for Wireguard?
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.