Pfsense - wireguard network issue

Networking & Firewalls
1

Hello,

Recently, I set up a site-to-site tunnel using pfSense on both ends, following a YouTube video created by Tom. When it comes to anything related to pfSense, in my opinion, Tom is the best teacher/instructor/helper on YouTube.

I successfully created the tunnel, and the peer status is green. However, for some reason, I can ping and connect to the network from Site A to Site B, but not from Site B to Site A. All firewall and VPN settings are identical, so it seems like I’m missing something I can’t find.

Please help me.

Thank you

2

If you do a trace route from Site B to A, where does it die? Might have a route missing somewhere.

3

From A to B

C:\Users\admin>tracert 192.168.7.233

Tracing route to ASUS [192.168.7.233]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 192.168.1.1
2 4 ms 3 ms 3 ms 192.168.5.6
3 3 ms 4 ms 3 ms ASUS [192.168.7.233]

From B to A

C:\Users\Val>tracert 192.168.1.159

Tracing route to 192.168.1.159 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.7.3
2 3 ms 3 ms 3 ms 192.168.5.5
3 * * * Request timed out.
192.168.1.0 remote LAN,
192.168.7.0 local LAN
192.168.5.0 tunnel

4

Looks like site B knows to forward to the tunnel at least but then dies. I’d suspect there’s a firewall rule off there. Maybe try on site A’s incoming firewall for Wireguard to allow all traffic and see if it comes through then.

5

Hey, Works!!!
actually, I did exactly as per Tom’s video

Time 12:25. No firewall rules for WireGuard, the rule for Interface (in his case WGDEMO).
For interface I had “allow all” and nothing for WG. I tryed adding “allow all” for WG and now it works both way
Thanks for your help!!!

1 Like
6

Helllll yea! Def have done that myself. Glad you’re golden now!