Use Bery AX as an exit node using wireguard

Router VPN, DNS, Leaks
1

Hello,

I have setup a wg tunnel with Beryl as a client and a remote opnsense router as a server. Beryl is behind a CGNAT network and opnsense has a public ip.

I would like to,

  1. Make guest network on Beryl use the opnsense router as the internet exit node.
  2. Make the opnsense router use the Beryl as an exit node.

I was able to do step 1 by selecting Guest network and make the settings like so,

image
image1996×425 48 KB

However, i am not able to do 2. The opnsense router is able to ping Beryl, but it cannot reach the internet through it. I have added,

in /etc/config/firewall

config forwarding 'wgclient12wan'
        option src 'wgclient1'
        option dest 'wan'
        option enabled '1'

image
image1539×104 14.7 KB

What else do i need to do?

PS: I found this post but its instructions are old not available on my firmware.

5

Sorry for the late reply.

After checking this use case, using the Beryl AX as a WireGuard Client exit node for traffic coming from the WireGuard Server side is not currently supported.
Thank you for your understanding.