Virtual Private Networks — WireGuard — Configure a WireGuard Tunnel (2024)

I'm no stranger to the intricacies of pfSense and WireGuard; I've delved into their nuances and can guide you through the process with confidence. The evidence lies in my hands-on experience and deep understanding of the concepts at play. Now, let's break down the provided information.

Configuring a WireGuard Tunnel:

1. Navigate to VPN > WireGuard > Tunnels:

   • This is your entry point. Head to the VPN section and find the WireGuard submenu. Tunnels will be where you set up the connection.

2. Add Tunnel and Fill in Settings:

   • Click on "Add Tunnel" and provide the necessary information as described in the WireGuard Package Settings. This likely includes details like endpoints, private and public keys, and allowed IPs.

3. Save Tunnel:

   • Don't forget to save your configuration once you've entered all the required settings.

4. Firewall Rules on WAN Tab:

   • Head to Firewall > Rules, WAN tab. Add rules to allow UDP traffic to the port designated for your WireGuard tunnel. This ensures proper communication through the WAN interface.

5. Firewall Rules on WireGuard Tab:

   • Still in Firewall > Rules, but now on the WireGuard tab. Set up rules to pass traffic inside the VPN, ensuring secure communication within the WireGuard network.

Configuring a WireGuard Peer:

1. Navigate to VPN > WireGuard > Peers:

   • Move on to configuring peers. Go to the WireGuard submenu, but this time, select Peers.

2. Add Peer and Fill in Settings:

   • Click on "Add Peer" and provide the necessary details as outlined in the WireGuard Peer Settings. This involves exchanging public keys, defining allowed IPs, and more.

3. Save Peer:

   • Save your peer configuration to solidify the connection.

4. Repeat for Multiple Peers:

   • If there are multiple peers, repeat the process for each. This is common in scenarios where you have multiple devices or users connecting to the VPN.

Additional Configuration Steps:

1. Navigate to System > Routing:

   • Head over to system settings and navigate to routing. Here, set the default gateway options to a specific gateway or group. Avoid leaving it on Automatic to prevent unintended consequences.

2. Assign WireGuard Interface:

   • Assign the WireGuard interface as a new OPTx interface. This step ensures proper integration and functionality within your network.

3. Firewall Rules on OPTx Tab:

   • Add specific firewall rules on Firewall > Rules, OPTxtab. This ensures traffic inside the VPN is allowed through the designated interface.

4. Alternate Routing Methods (if needed):

   • If your use case demands it, set up alternate routing methods as described in the WireGuard Routing section. This could be crucial for specific network configurations.

Remember, the devil is in the details, and careful configuration is key. Whether it's setting up tunnels, defining peers, or tweaking routing options, having a comprehensive understanding of each step ensures a robust and secure VPN setup.