Securely Access Your Home Network with WireGuard VPN on OPNsense

If you wish to access apps, services, and other devices on your home network remotely, you may set up a VPN server on your network.

#OPNsense includes options for IPsec, OpenVPN, and WireGuard VPN. In this video, I will be demonstrating how to set up Wireguard VPN using the latest version of OPNsense and WireGuard. I will also show how to access a hosted web app behind the virtualized instance of OPNsense I am running, which should mimic accessing your home network remotely.

Since OPNsense has updated its WireGuard web interfaces to include a peer generator, setting up WireGuard on OPNsense has never been easier!

For a written version of this guide, please visit:

Chapters:

00:52 Set up the WireGuard VPN instance
03:05 Adding peers/clients via the peer generator
06:48 Set up a Linux WireGuard client
10:57 Save the generated peer configuration
12:16 Enable WireGuard instance
12:38 Assign WireGuard interface
13:53 Creating firewall rules for the WireGuard interface
16:44 Create firewall rule on the WAN interface
18:41 Testing the WireGuard client connection
22:00 Creating a firewall rule for an example hosted web app

EP52

[J_xoshh]

I just wanted to say thank you for the OPNSense videos. I've been getting more involved with getting my home network more complex and you've been a huge help, I haven't had any hiccups *yet*

[intangiblesloth]

Thanks for all your videos. Helped my partner and I setup our badass network 😎

[LtColDavenport]

One of the videos I was still waiting! Already set it up on my own, but I will gladly watch this in order to see if I did make it right!!

[JasonsLabVideos]

NICE! I see qr code now for easy fast setup on mobile devices !! Nice work sir !

[kronosg]

Tailscale wins for me but its great to have a video for Wireguard anyway! great job!

[ZombieLurker]

I need some more ideas of what to setup in my Proxmox lab. I'm the only one on my network, so haven't really had any reason to need a separated lab network yet, besides VLANs. I'm caught up on all my smaller projects and want to start learning more security related things, so a separate network for that would probably be smart. Have you done an overview video on everything you have set up in your own lab yet? That would be cool to see, so I can steal some of your ideas. Haha.

[tx_slim_tx]

Is it possible to get a Full Tutorial on OPNsense Dynamic ISP Network (bare metal) with server (bare metal) Proxmox - Ubuntu(VM) - Docker/Portainer, Cloudflare DDNS, Wireguard, Nextcloud secure installation/setup? I might not be able to fund the video but would definitely donate a handful of coffees. I get lost trying to combine all of your videos together 😂.

[Kyonkun]

Thank you very much for the video. I followed the steps and, after adding a rule in the firewall for WireGuard -> WAN, I was able to connect to internet. Now, this afternoon, I've tried again and no internet and looks like no handshake. There has not been any changes since this morning and suddenly it has stopped working. Any idea why?

[SonicNinja]

After following a bunch of guides, this was the one that worked for me. Thanks for the guide. Only issue I'm running into is trying to access my TrueNAS SMB share from the Wireguard connection. I made a rule to allow access to it's IP but it keeps failing to connect. Do I need to do something different to get an SMB share to work?

[frankenjeda]

Thank you so much for this video, Please could you also make a video for OpenVPN on Opensense?

[deniswalks]

Is it possible to make a WG connection to OPNsense, that’s connected via WG to another site?

[Ykhavari]

What would be the difference between this and tailscale? I currently use tailscale