Route specific devices through a VPN tunnel in OPNsense

Hey everyone – I’ve tried following a few guides I’ve found but I am unable to get this working yet. I’m not sure if the most practical way to do this is using alias or VLANS, but I tried both methods via opnsense forum/guides and I do not have a working setup yet.

Just to be clear, I would like to have certain IP/devices on my network be funneled outbound and inbound ONLY thru a wireguard VPN tunnel.

Follow this exactly and it will work:

I’ll check it out, thank you!

I’ve made it to Step 8 when I create a firewall rule for RFC1918_networks.

When I try to add ‘192.168.0.0/16 10.0.0.0/8 172.16.0.0/12’ into the Content field, it says those aren’t valid networks.

My eariler alias for traffic i want to push thru the tunnel is using ‘192.168.1.0/24’ – should i just use that for the Step 8 network? Or should I use HOSTS instead of Networks in Step 7?

Sorry for the newbie questions but I’m just a 41 year old DIY and I’m not in IT, just self taught for my home network.

This is the exact same guide I used to set up my VPN. +1

Did you create the alias? Or are you saying you’re having a hard time adding those networks into an alias?

I was able to create the first alias in step 7, but in step 8, the 2nd alias, it won’t let me add those networks to the alias, it says they don’t exist.

So should I put in the same network I used for the alias in step 7, also in step 8? I was just copying the contents they listed in step 8 which happens to be a different network subset then what I used in step 7’s alias.

No, the aliases serve different purposes. As I said, follow the guide exactly.