General • Wireguard Site-to-Site Route not working

Hello forum,

I have set up a site-to-site VPN with Wireguard.

Here are the facts:

SITE A:
- OPNsense Firewall
- LAN IP network 192.168.1.0/24
- Wireguard IP 10.13.37.1/24
- Public IPv6
- No public IPv4
- Public DNS entry available (sitea.domain.com)

SITE B
- MikroTik RB5009
- LAN IP network 192.168.178.0/24
- Wireguard IP 10.13.37.2/24
- Public IPv4 + IPv6 prefixes
- Public DNS entry available (siteb.domain.com)

The problem:
Site A has a static internet connection with a static public ipv6, but no ipv4.
Site B has a normal Internet connection, which has to be reconnected every 24 hours.
As soon as the Internet connection has been re-established, the route for Wireguard on Site B no longer works correctly.
Pings from B to A work, but I cannot access an internal website via HTTPS.
The packets no longer come back via the tunnel.

Only when I deactivate the Wireguard VPN on Site B and delete the static route, wait 10-20 seconds, reactivate the VPN and re-enter the route does it work again.
I have tried to automate the procedure via script, but this does not work.

Site A is configured correctly because another client with a Ubiquity router does not have these problems.

Does anyone know the problem?
It's pretty stupid if I have to restart the VPN manually every day

Statistics: Posted by Vorderwaeldler — Thu Feb 22, 2024 6:20 pm

---