Can WireGuard and OpenVPN Coexist on Untangle?

[djrees]

Have a client currently setup with OpenVPN for a site to site connection as well as client connections for remote access to office network. Would like to switch the Site to Site over to WireGuard VPN and leave the OpenVPN in place for the clients to connect for remote access. Is this possible? Would there be a conflict with both running? Tried to search for messages about this but no luck finding any. Anyone who has done this please advise.

[jcoffin]

Yes, Both can be used in one deployment. You will have to have manually add any WireGuard endpoint networks to the exported OpenVPN networks.

[djrees]

Yes, Both can be used in one deployment. You will have to have manually add any WireGuard endpoint networks to the exported OpenVPN networks.

OK,
I may have to take the networks out of the OpenVPN exported networks, then setup WireGuard. When I tried to set it up I received an error of a conflict with OpenVPN networks. The first site tunnel config saves normally, When I try to save the second site to site tunnel in WireGuard I get an error of.

This happens even if I turn off OpenVPN completely on both sides. I have not tried restarting the units. May need to do that to clear out the networks info or routes.

[djrees]

Finally got WireGuard to accept the site to site configs. Had to remove OpenVPN Apps from both units and restart both of them. Unfortunately was not able to stay with WireGuard as the only site to site connection. The remote Windows server is doing DHCP and DNS for the computer domain. WireGuard did not pass that through to the remote client even though the tunnel was up and passing traffic. Tried to change the DNS but it did not help. Had to go back to the OpenVPN setup with its abiltiy to push the DNS from the remote server to the workstations at the physical business. Had to remove both WireGuard apps as it created a conflict with OpenVPN, had to put it back to the way it was and restart both units again. Was hoping to use WireGuard to improve the speed of the site to site connection. Maybe a future version will be more configurable.

[gravenscroft]

I may have to take the networks out of the OpenVPN exported networks, then setup WireGuard. When I tried to set it up I received an error of a conflict with OpenVPN networks.

Yep. You can use both apps simultaneously, but you can't have the same route defined in both or NG Firewall won't know which route is 'correct'. You'll need to remove from OpenVPN any routes you intend to use in WireGuard before setting up the WireGuard tunnel.