opnsense / plugins

OPNsense plugin collection
https://opnsense.org/
BSD 2-Clause "Simplified" License
832 stars 620 forks source link

os-wireguard 2.5_2 - CARP - Static route not added #3717

Closed skkrajch closed 3 months ago

skkrajch commented 9 months ago

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug After activating CARP on the wireguard interface, a static route to WG peer LAN network is not beeing added after a reboot.

To Reproduce Steps to reproduce the behavior:

  1. For a given WG instance - VPN / Wireguard / Settings / Instances / Edit / Check: "Disable routes", "Depend on (CARP)": select your WAN CARP
  2. For a given WG peer - VPN / Wireguard / Settings / Peers / AllowedIPs: 0.0.0.0/0
  3. Add WG peer as gateway - System / Gateways / Single / IP address: your peers WG instance Tunnel address, Interface: WG interface, Priority: lower than your upstream gateway, Far Gateway: checked, Disable Gateway Monitoring: checked, Disable Host Route: checked
  4. Create a static route - System / Routes / Configuration / Add / Network: peer's LAN network, Gateway: in 3. created WG gateway
  5. Reboot
  6. Result: Static route created in 5. not added.

Expected behavior The route shall be added after a reboot .

Additional context The route is added correctly for the same configuration but without CARP dependency. I don't know if the issue exists in previous releases as configured CARP dependency now in 23.7.10_1.

Environment OPNsense 23.7.10_1-amd64 FreeBSD 13.2-RELEASE-p7 OpenSSL 1.1.1w

VM on XCP-NG

OPNsense-bot commented 3 months ago

This issue has been automatically timed-out (after 180 days of inactivity).

For more information about the policies for this repository, please read https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md for further details.

If someone wants to step up and work on this issue, just let us know, so we can reopen the issue and assign an owner to it.