Hi @Tpexe 

Thanks for posting in our business forum.

Would like to see more about your config and please mosaic your key or other sensitive info. Seem to be a config issue if you don't set up ACL to block it.

You can refer to the guide we had before Configuration Guide How to Configure Site-to-Site WireGuard VPN on Omada Controller

Hi @Tpexe 

Thanks for posting in our business forum.

Not sure if there is any problem with the opensense. Have you tried to modify your subnet? It does not match. I don't find anything wrong so far.

Is the tunnel up?

If you try to ping the gateway, possible?

Hi @Tpexe 

Thanks for posting in our business forum.

Tpexe wrote

Hi @Clive_A, 

 

thanks.

 

Yes the tunnel is active.
I can ping OPNsense and configure it with local IP (10.100.0.4).
I can also ping the gateway 10.100.0.1.

Then it stops, other servers do not work. I have an unconfigured Debian server installed in the cloud, I can't ping it.

 

Thx.

If you can ping all the gateway IPs, but not the servers/IPs in your remote LAN, I think you should check the firewall-related stuff. When I test NAT traversal with Tailscale or other stuff, I am not able to access the internal devices too. I can access the router without any issue but not inside the LAN. But it should be accessible. Usually, it is the device blocks the requests.

WG is active based on your description and it performs well. Try disabling the firewall and other stuff.