Select Hybrid outbound NAT rule generation. Make sure the `block` rule is below the allow rule. This will also be our, additional, "kill switch". While we are at it, do this to enable a kill-switch for your traffic should the WireGuard interface go down:Īdd another rule on the same interface, but this time - make sure to select `Block`. Select the designated interface (10_VPN) for your net which you would like to go out on internet through this WireGuard VPN.Īllow any any IPv4, but be sure to select Click Save.ĭescription: PIA through WAN_WG_NordVPN_FR After assignment, click the name of the interface (`OPT5` or something similar).
You'll have a new interface you can assign (`wg0`).Īssign this interface. You'll also notice you have a successfull Handshake with the specific interface whenever this is > 0 (wg0). * Under Peers, select the newly created `` peer.Īfter you have selected Save- go to List Configuration (might take some time to load).īecause of our persistent keepalive - you should see the received and sent transfer is steadily increasing. Public Key: insert public key from `sudo wg` (`21dz9Y6HFRzaXKLpFpcZHjcI5AJQopJW/JZShKjTKkZ=`) Here you will copy the information from the section (sudo wg). Probably the DNS Server are used for allowing a FQDN on Endpoint Address instead of IP? Anyway, add the Address from which you have connected.Ĭreate a new Endpoint by hitting the + icon.
* Peers: Nothing selected, leave blank for nowĬlick Save. * Tunnel Address: insert inet address from `ip addr show nordlynx` (`10.5.0.2/16`) * Listen Port: 51822 (use a random port which is not in use on the system) * Private Key: insert private key from `sudo wg show nordlynx private-key` (`FSzJDH1171AJKldoqohndlakO3918djals/jkdjkfl0=`) * Public Key: insert public key from `sudo wg` (`UTZ4PHmX5zAOSvdhqp0Ed8q4z0OHgMk8ztalChHaPU=`)
Let's try to configure OPNsense.Īllright, we have what we need to get things going regards to configuring our OPNsense firewall.Īdd a server by pressing the little + icon Your private key, your public key, servers public key, the endpoint address and the port. Code: sudo wg show nordlynx private-keyįSzJDH1171AJKldoqohndlakO3918djals/jkdjkfl0=
0 kommentar(er)
