hervature Posted April 26, 2023 Share Posted April 26, 2023 Hello, I'm able to properly configure the Wireguard settings such that my peer can perform the handshake with the server but I cannot actually do anything over the VPN. No access to internet nor LAN. My network is looks something like: Peer <===> Internet <===> Modem <===> eero <===> unRAID I have to forward a port from the modem to the eero and then again from the eero to the unRAID server. This appears to be working because the handshake works followed by some data being sent from the peer to the server but very little data being returned. To complicate matters, I use Adguard as my DNS which is on the unRAID server. I am able to get the handshake working with and without Adguard specified as the DNS but always no internet/LAN access. Here is the Wireguard config for the server: [Interface] #Home VPN PrivateKey=<redacted> Address=10.253.0.1, fc00:253:0:0::1 ListenPort=51820 PostUp=logger -t wireguard 'Tunnel WireGuard-wg0 started' PostUp=iptables -t nat -A POSTROUTING -s 10.253.0.0/24 -o br0 -j MASQUERADE;ip6tables -t nat -A POSTROUTING -s fc00:253:0:0::/64 -o br0 -j MASQUERADE PostDown=logger -t wireguard 'Tunnel WireGuard-wg0 stopped' PostDown=iptables -t nat -D POSTROUTING -s 10.253.0.0/24 -o br0 -j MASQUERADE;ip6tables -t nat -D POSTROUTING -s fc00:253:0:0::/64 -o br0 -j MASQUERADE PostUp=ip -4 route flush table 200 PostUp=ip -4 route add default via 10.253.0.1 dev wg0 table 200 PostUp=ip -4 route add 192.168.4.0/22 via 192.168.4.1 dev br0 table 200 PostDown=ip -4 route flush table 200 PostDown=ip -4 route add unreachable default table 200 PostDown=ip -4 route add 192.168.4.0/22 via 192.168.4.1 dev br0 table 200 [Peer] #iPhone PublicKey=<redacted> AllowedIPs=10.253.0.2, fc00:253:0:0::2 The config for the peer: [Interface] #iPhone PrivateKey=<redacted> Address=10.253.0.2/32, fc00:253:0:0::2/128 DNS=192.168.4.2 #Adguard [Peer] #Home VPN PublicKey=<redacted> Endpoint=71.38.147.68:51820 AllowedIPs=0.0.0.0/0, ::/0 If anyone could help me resolve this, I would be eternally grateful! Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.