Yes, you can connect WireGuard with OPNsense and achieve similar functionality to an OpenSSL VPN router on Debian.

F5F Stay Refreshed Power Users Networks Yes, you can connect WireGuard with OPNsense and achieve similar functionality to an OpenSSL VPN router on Debian.

Yes, you can connect WireGuard with OPNsense and achieve similar functionality to an OpenSSL VPN router on Debian.

Yes, you can connect WireGuard with OPNsense and achieve similar functionality to an OpenSSL VPN router on Debian.

C

Click4300
Member

61

07-27-2025, 07:31 AM

#1

Hello, network information note: without instructions I’m at a loss, but I’m familiar enough to admit I don’t understand everything. This setup is for my router, which I really appreciate for its ability to randomly change the VPN IP it connects to using "remote-random" from ovpn. Archived link: https://web.archive.org/web/201803200955...outer.html. Restart the ovpn service to get a new IP. Also, the kill switch is helpful—it stops connections from clients by turning off IP forwarding and also blocks the router’s own traffic. I started an OPNSENSE VM with a WireGuard tunnel; since there are guides for single connections, it seems functional. I looked at https://forum.opnsense.org/index.php?topic=38550.0 and learned that WireGuard can implement a kill switch for clients as well as itself (though not critical). I’m curious if it’s possible to switch between multiple WireGuard interfaces easily, or what steps are needed. If you’re comfortable with it, I’d really appreciate your guidance.

C

Click4300

07-27-2025, 07:31 AM #1

Hello, network information note: without instructions I’m at a loss, but I’m familiar enough to admit I don’t understand everything. This setup is for my router, which I really appreciate for its ability to randomly change the VPN IP it connects to using "remote-random" from ovpn. Archived link: https://web.archive.org/web/201803200955...outer.html. Restart the ovpn service to get a new IP. Also, the kill switch is helpful—it stops connections from clients by turning off IP forwarding and also blocks the router’s own traffic. I started an OPNSENSE VM with a WireGuard tunnel; since there are guides for single connections, it seems functional. I looked at https://forum.opnsense.org/index.php?topic=38550.0 and learned that WireGuard can implement a kill switch for clients as well as itself (though not critical). I’m curious if it’s possible to switch between multiple WireGuard interfaces easily, or what steps are needed. If you’re comfortable with it, I’d really appreciate your guidance.