I have an issue that has been haunting me for weeks !!!
I have three sites, all with PFsense routers in each office.
I have setup WireGuard to link from the branch offices to the Head Office.
Head Office:
LAN: 172.16.1.0/24
AT&T WAN: Static Public IP
Comcast WAN: Static Public IP
Both WAN in Failover Gateway group
Transit Network: 10.100.90.1/29
Peer to Branch1:
allowed IP s 10.100.90.2/32 192.168.60.0/24
Peer to Branch 2:
allowed IPs 10.100.90.3/32 192.168.70.0/24
Routing:
192.168.60.0/24 10.100.90.2 UGS 1420 tun_wg0
192.168.70.0/24 10.100.90.3 UGS 0 1420 tun_wg0
Branch 1:
LAN: 192.168.60.0/24
WAN: Static Public IP
Peer to Head Office:
allowed IPs 10.100.90.1/32 172.16.1.0/24
Routing:
172.16.1.0/24 10.100.90.1 UGS 0 1420 tun_wg0
Branch 2:
LAN: 192.168.70.0/24
WAN: Static Public IP
Peer to Head Office:
allowed IP10.100.90.1/32 172.16.1.0/24
Routing:
172.16.1.0/24 10.100.90.1 UGS 3 1420 tun_wg0
I have an issue trying to see the Branch 1 and Branch 2 networks from the Head Office machines.
On the other hand, computers in Branch 1 and Branch 2 can see the Head Office perfectly and connect to servers and printers in the Head Office without issue.
I have used the diag tools on each of the PFsense routers, and they all confirm pings from Head office to devices in Branch 1 and Branch 2.
Its just the PC’s in the head office cannot see or ping any devices in Branch 1 or Branch 2.
Would anybody care to offer some advice on what might be going on.
Thank you for reading this.