help with WireGuard and pfSense

[Ofir aviel]

, I have a PiVpn WireGuard server running at my dad's house where the local network's subnet is 192.168.1.0/24, and I have a pfsense PC connected to a CGNAT Wan at my house as a client with the lan subnet of 192.168.10.0/24 to the WireGuard server.

 

the WireGuard's subnet is 10.227.186.0/24

 

I want to access my 192.168.10.0/24 network when I am connected to the WireGuard server as a client. how can I achieve such a thing?

[Alex Atkin UK]

1 hour ago, Ofir aviel said:

, I have a PiVpn WireGuard server running at my dad's house where the local network's subnet is 192.168.1.0/24, and I have a pfsense PC connected to a CGNAT Wan at my house as a client with the lan subnet of 192.168.10.0/24 to the WireGuard server.

 

the WireGuard's subnet is 10.227.186.0/24

 

I want to access my 192.168.10.0/24 network when I am connected to the WireGuard server as a client. how can I achieve such a thing?

I'm confused, if you are connected to Wireguard from your home, you still have full access to your home LAN.

 

Or did you mean you want to access your home LAN when at your dads house?  That would require configuration on the PiVPN.

I mean to make pfSense route between Wireguard and the LAN you need Outbound NAT rules to allow LAN traffic to translate to the WG network.

That is my Wireguard interface network.

Then you also need Firewall Rules to do the opposite, allow all traffic from the Wireguard interface to LAN Destination.

But I'm honestly confused what you are trying to do here.

[Ofir aviel]

10 hours ago, Alex Atkin UK said:

I'm confused, if you are connected to Wireguard from your home, you still have full access to your home LAN.

 

Or did you mean you want to access your home LAN when at your dads house?  That would require configuration on the PiVPN.

I mean to make pfSense route between Wireguard and the LAN you need Outbound NAT rules to allow LAN traffic to translate to the WG network.

That is my Wireguard interface network.

Then you also need Firewall Rules to do the opposite, allow all traffic from the Wireguard interface to LAN Destination.

But I'm honestly confused what you are trying to do here.

This is the map of my network. (I'm sorry for my drawing skills, they are bad...)
Using my pixel 6 Pro I can access the 192.168.1.0/24 network and the 10.227.186.0/24 but I cannot access the 192.168.10.0/24 network.

 

My end goal is to get access to the 192.168.10.0/24 network from my Pixel 6 Pro.

[Alex Atkin UK]

12 hours ago, Ofir aviel said:

This is the map of my network. (I'm sorry for my drawing skills, they are bad...)
Using my pixel 6 Pro I can access the 192.168.1.0/24 network and the 10.227.186.0/24 but I cannot access the 192.168.10.0/24 network.

 

My end goal is to get access to the 192.168.10.0/24 network from my Pixel 6 Pro.

Got it, so basically you need a NAT rule on PiVPN that will translate between the two networks.  I'm not familiar with PiVPN to know how to do that though.  Should be similar to how you set it up to NAT between 10.227.186.0 and 192.168.1.1 though.
I think you need the rule I mentioned on the pfSense end too in order to send the replies back.