Hello,
I'm able to properly configure the Wireguard settings such that my peer can perform the handshake with the server but I cannot actually do anything over the VPN. No access to internet nor LAN. My network is looks something like:
Peer <===> Internet <===> Modem <===> eero <===> unRAID
I have to forward a port from the modem to the eero and then again from the eero to the unRAID server. This appears to be working because the handshake works followed by some data being sent from the peer to the server but very little data being returned. To complicate matters, I use Adguard as my DNS which is on the unRAID server. I am able to get the handshake working with and without Adguard specified as the DNS but always no internet/LAN access. Here is the Wireguard config for the server:
[Interface]
#Home VPN
PrivateKey=<redacted>
Address=10.253.0.1, fc00:253:0:0::1
ListenPort=51820
PostUp=logger -t wireguard 'Tunnel WireGuard-wg0 started'
PostUp=iptables -t nat -A POSTROUTING -s 10.253.0.0/24 -o br0 -j MASQUERADE;ip6tables -t nat -A POSTROUTING -s fc00:253:0:0::/64 -o br0 -j MASQUERADE
PostDown=logger -t wireguard 'Tunnel WireGuard-wg0 stopped'
PostDown=iptables -t nat -D POSTROUTING -s 10.253.0.0/24 -o br0 -j MASQUERADE;ip6tables -t nat -D POSTROUTING -s fc00:253:0:0::/64 -o br0 -j MASQUERADE
PostUp=ip -4 route flush table 200
PostUp=ip -4 route add default via 10.253.0.1 dev wg0 table 200
PostUp=ip -4 route add 192.168.4.0/22 via 192.168.4.1 dev br0 table 200
PostDown=ip -4 route flush table 200
PostDown=ip -4 route add unreachable default table 200
PostDown=ip -4 route add 192.168.4.0/22 via 192.168.4.1 dev br0 table 200
[Peer]
#iPhone
PublicKey=<redacted>
AllowedIPs=10.253.0.2, fc00:253:0:0::2
The config for the peer:
[Interface]
#iPhone
PrivateKey=<redacted>
Address=10.253.0.2/32, fc00:253:0:0::2/128
DNS=192.168.4.2 #Adguard
[Peer]
#Home VPN
PublicKey=<redacted>
Endpoint=71.38.147.68:51820
AllowedIPs=0.0.0.0/0, ::/0
If anyone could help me resolve this, I would be eternally grateful!