Skip to content

wireguard-s2s-howto: Keepalive interval requirement #691

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions source/manual/how-tos/wireguard-s2s.rst
Original file line number Diff line number Diff line change
Expand Up @@ -74,26 +74,31 @@ Go to tab **Peers** and press **+** to create a new peer.

Enable the *advanced mode* toggle.

====================== ====================================================================================================
======================= ====================================================================================================
**Enabled** *Checked*
**Name** *wgopn-site-b*
**Public Key** *Insert the public key of the instance from wgopn-site-b*
**Shared Secret** *Leave empty*
**Allowed IPs** *10.2.2.2/32 192.168.0.0/24*
**Endpoint Address** *203.0.113.2*
**Endpoint Port** *51820*
====================== ====================================================================================================
**Keepalive interval** *25*
======================= ====================================================================================================

Press **Save** and **Apply**.

Go to tab **Instances** and edit *wgopn-site-a*.

====================== ====================================================================================================
**Peers** *wgopn-site-b*
====================== ====================================================================================================
====================== ====================================================================================================

Press **Save** and **Apply**.

.. Attention::
When setting up a Site-to-Site VPN with two OPNsense firewalls, you have to configure **Keepalive interval** for at least one peer.
Otherwise no firewall will initiate the connection and the Site-to-Site VPN will never come up.

------------------------------------------------------
Step 3b - Setup WireGuard Peer on OPNsense Site B
------------------------------------------------------
Expand Down