Re: wg(4) on router - how to get working with clients

2022-08-15 Thread Courtney
I beat my head against the wall on OpenBSD wg clients. I gave up and switched to using wireguard-tools and prefer it. It uses the standard wgX.conf and I find it easier to turn on/off since I don't want it always on. You could also run it (I think the binary command is wg-quick) and test that i

Re: wg(4) on router - how to get working with clients

2022-08-08 Thread B. Atticus Grobe
I've been running wg since it was introduced into the kernel without any issues. local pf.conf: ... pass in on wg0 from (wg0:network) to any match out on wg0 from any to any nat-to (wg0) ... pass out modulate state remote pf.conf: ... pass in on wg0 pass out on wg0 match out on vio0 nat-to (vio0)

Re: wg(4) on router - how to get working with clients

2022-08-08 Thread Stuart Henderson
On 2022-08-08, Rachel Roch wrote: > TL;DR I've got wg(4) working great on the router itself (i.e. VPN up, all > localhost traffic routes across VPN). But I can't get it working with > external clients (i.e. devices that use the router as their default gateway). > > ip.forwarding is on: > net.ine