DefGuard / defguard

Zero-Trust access management with true WireGuard® 2FA/MFA
https://defguard.net
Other
1.62k stars 54 forks source link

Opnsense installation - unclear on how to install & enable #774

Open klinkeye opened 2 months ago

klinkeye commented 2 months ago

Following https://defguard.gitbook.io/defguard/admin-and-features/setting-up-your-instance/gateway#opnsense-plugin Im unclear on if this is a step to be done on its own or in conjunction after installing the main gateway package.

After following the documentation above, I have installed only the "opnsense-plugin" package. I can see the configuration that exists in the Opnsense gui under VPN. However filling out the settings etc I receive the error "Endpoint not found" and at the top I see "Action not allowed or missing"

So my assumption is that the installation of the plugin alone isnt sufficient, I'd need to install the FreeBSD gateway package too?

Im quite impressed with Defguard's mission and would be happy to contribute to documentation.

Pasukaru commented 1 month ago

Running into the same issue.

From my limited understanding, I think it's lacking defguard-core. The OPNsense plugin is only the defguard gateway. I don't think a plugin for the core part exists (yet). At least I have not been able to find anything.

So what that means is you need to host the core somewhere, and then connect the gateway to it. I was also hoping to have it all running on OPNsense, but have not found a solution yet. Unfortunately OPNsense is freebsd and not linux, so running core in docker is also not an option for a quick workaround.