I know this must be very simple. However, it is not working for me. I have created a user in the WUI. I downloaded the file to the client machine (Linux Laptop running CahchyOS). When I activate the VPN in NM I get output from the sudo wg show wg0 command. interface: wg0 public key: lX5PyKm+q…

I do appreciate all your help. - Thank you - I will close this out now.

This is great. You are clearing up a lot of my issues. When a WG client is connected to IPFire do I need specific access rules them? If I am on a laptop on BLUE or a desktop on GREEN? What if I am remote and connected to ipfire through WG, can I access the devices on the WG network?

[image] John Koch: WG VPN tunnel is only setup in IPFire for a remote client to route all their traffic into and through the firewall. That client has access to the internet RED through the firewall. You can also decide what networks the peer is able to reach. By default, this is 0.0.0.0/0 t…

This is what the ping result should look like tcpdump -i green0 -n icmp tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on green0, link-type EN10MB (Ethernet), snapshot length 262144 bytes 03:16:41.160966 IP 10.168.150.3 > 192.168.11.110: ICMP echo request, id 1,…

[image] John Koch: When a client (peer) Connected to Blue is on the WG VPN it cannot access the Internet. It can access the IPFire WUI. The documentation says the the RED and Green rules are created by IPFire. I would therefore assume that a Laptop on Blue with a WG connection should be able to…

Sorry for the long delay. I was try to get one client to connect. As requested here is the diagram. Now for my next issue, The WUI now no longer accessible. I must have added a rule that made it unavailable. SSH still works. Is there a way with preforming dangerous surgery on the iptables to fi…

You could try elinks from console or SSH. [image] elinks

The WUI issue is limited to just my desktop. I will have to see if its a Green access issue or a single IP.

The WUI issue is also now on a laptop also. It worked yesterday. This morning I tried to log in and cannot get past the Sign in.

After the forth time of creating and deleting WG clients and doing the import I have managed to get one client on line. However, I do not think it is working as a full tunnel, all traffic from the client into and out of IPFire. Should there be a similar rule for Wireguard? Chain NAT_DESTINATION_FI…

Its better, but watching nethogs shows that pacman did not use the tunnel.

WireGuard Roadwarrior Client Setup

VPNs WireGuard

bonnietwin (Adolf Belka) 29 May 2026 11:38 41

It was IPv4