Gateway disabled after reboot

Networking & Firewalls
1

I’ve been testing site to site Wireguard VPN. I really like it, however I have one issue. When I reboot the one of the routers the gateway I created for the static routed is disabled. I have to manually untick the disable box to get the VPN active again.

When I reboot the router on the other side all gateways are active.

Both routers appear to have the same config. There is nothing in the logs.

Can anyone help with this issue? Thanks.

2

Think I may have found a solution.

When I change the Monitor IP in the gateway settings to be the IP it’s own interface IP (instead of being empty, the other side of the VPN interface IP or being marked as alway up) the gateway starts after a reboot.

3

I’m facing the same issue though my setup is a bit different. The three sites are all behind NAT (the ISP itself NAT the connection) so all the three sites are routing through a Cloud VPS. I tried following your advice by setting the monitoring IP of the gateway to the tun_wg0 interface IP and disabling the gateway action, but it doesn’t work for me. Also tried disabling Gateway monitoring but still the same issue.

What I believe is happening is when the firewall halts or reboots, it stops the WireGuard service, and in the process the Gateway associated with it gets disabled, the same way if you uninstalled the WireGuard package.

However, upon booting back up it doesn’t gets enabled automatically. This is my take on this issue. Hope someone can find a solution soon as I’m scratching my head over this.

4

I’m still having this issue. Seems to be more intermittent now. The same problem has been raised here: Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted - pfSense Packages - pfSense bugtracker

5

I do have the same problem.
on 2.6.0 everything works for me
On 22.05 the issue occurs
On 2.7.0 the issue occurs
here is my thread:

still no solution
tried 2.7.0 again today.

Sebastian

6

Here is more
Maybe it is the PPOE connection

https://www.reddit.com/r/PFSENSE/comments/tc8zsx/wireguard_service_not_starting_on_system/?utm_source=share&utm_medium=web2x&context=3

7

I tried again. Every version since 22.01 and 2.6.0.
23.01. beta is still broken for me.
No luck at all.
I wrote it down in the negate forums but there seems to be no support.
I think this is broken and will not be fixed soon.

A script which reinstalls wireguard on every boot fixes the error. Great solution.

8

Switched to opnsense.
No issues reusing the keys of the servers.
All up and running