Invalid target IP with a wireguard config #1661

New Issue

MrUnknownDE · 2026-04-05T19:39:05+02:00

MrUnknownDE commented

2026-04-05 19:39:05 +02:00

Originally created by @SeiyaGame on 3/30/2025

The goal I have here is to set up a WireGuard configuration on my OPNsense in order to securely provide access to all my VLANs.

So I added a site and used the basic WireGuard tunnel configuration
At that point, it generated the following WireGuard configuration:

[Interface]
Address = 100.89.128.8/30
ListenPort = 51820
PrivateKey = iEJSNHnMS7CEGg0XIKR/6Uzk4jKCxX+6hUgvDWE7Q2U=

[Peer]
PublicKey = qUV+OIICNzGUgqHBSreZzlG9aOgTPnwtWZFej7/GllY=
AllowedIPs = 100.89.128.1/32
Endpoint = mydomain.here:51820
PersistentKeepalive = 5

Already at this point, I can see that it's not possible to configure the AllowedIPs.
On my OPNsense, I added the configuration, and for the peer, I included all the subnets that I want Gerbil to have access to under AllowedIPs.
The WireGuard tunnel is successfully established on both sides at this point.

Next, I added a resource and then a connectivity.
In the Target Configuration, I entered the IP of the service I want to make accessible, which is 192.168.1.5/24 but could be other local IP

I get the following error message:

From what I understand, I can only enter an IP from this range: 100.89.128.0
I don’t understand why :/

config/config.yml

...
gerbil:
    start_port: 51820
    base_endpoint: "mydomain.here"
    use_subdomain: false
    block_size: 24
    site_block_size: 30
    subnet_group: 100.89.128.1/24
...

*Originally created by @SeiyaGame on 3/30/2025* The goal I have here is to set up a WireGuard configuration on my OPNsense in order to securely provide access to all my VLANs. So I added a site and used the basic WireGuard tunnel configuration At that point, it generated the following WireGuard configuration: ```ini [Interface] Address = 100.89.128.8/30 ListenPort = 51820 PrivateKey = iEJSNHnMS7CEGg0XIKR/6Uzk4jKCxX+6hUgvDWE7Q2U= [Peer] PublicKey = qUV+OIICNzGUgqHBSreZzlG9aOgTPnwtWZFej7/GllY= AllowedIPs = 100.89.128.1/32 Endpoint = mydomain.here:51820 PersistentKeepalive = 5 ``` Already at this point, I can see that it's not possible to configure the AllowedIPs. On my OPNsense, I added the configuration, and for the peer, I included all the subnets that I want Gerbil to have access to under AllowedIPs. The WireGuard tunnel is successfully established on both sides at this point. Next, I added a resource and then a connectivity. In the Target Configuration, I entered the IP of the service I want to make accessible, which is 192.168.1.5/24 but could be other local IP I get the following error message: ![Image](https://github.com/user-attachments/assets/f5898de6-67e6-4374-9ff2-47e4fcd01119) From what I understand, I can only enter an IP from this range: 100.89.128.0 I don’t understand why :/ --- `config/config.yml` ```yml ... gerbil: start_port: 51820 base_endpoint: "mydomain.here" use_subdomain: false block_size: 24 site_block_size: 30 subnet_group: 100.89.128.1/24 ... ```

MrUnknownDE closed this issue

2026-04-05 19:39:05 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1661