Way to prevent Clients to use Wireguard Tunnel
Way to prevent Clients to use Wireguard Tunnel
Hi,
as Wireguard is not supported in VPN Policy or WAN Interface in Policy Routing, is there any other way to block clients having access to the tunnel?
I have some tunnels, that should only be accessible from specific clients.
Thank you
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I have same or similar problem.
On the client side I need to set 0.0.0.0/0 as allowed IP addresses so that all traffinc goes through the tunnel.
However, on the Server side (Omada gateway) I am not able to create any rule that would block WG Client to access all LANs and VLANs (complete internal network).
I need to have one client have access only to internet and one specific VLAN and nothing else. Is this possible? Or do we need to wait for the ER605 updated firmware?
- Copy Link
- Report Inappropriate Content
@Clive_A
Any update to WireGuard with Policy Routing? Q1 is in full swing and we haven't heard anything on this for any beta releases etc.
This is a long requested essential feature and would elevate the WireGuard VPN feature from workable to useful.
- Copy Link
- Report Inappropriate Content
Hi @s42p
Thanks for posting in our business forum.
s42p wrote
@Clive_A
Any update to WireGuard with Policy Routing? Q1 is in full swing and we haven't heard anything on this for any beta releases etc.
This is a long requested essential feature and would elevate the WireGuard VPN feature from workable to useful.
Don't rush it. That's only an estimation and it may be delayed or advanced like the statement writes. It is a timeframe provided by the team with a schedule check but it is not final or definite.
And there are still about 50 days left this quarter.
And if you feel it is a "long" request, you may visit the request sector where there are tons of feature requests. There is a priority in the eyes of the PM and dev team. What you think is the most important may not match the priority of the team. Please be patient.
About this specific request, I have not heard anything so far and I'll update the beta or official firmware as soon as I am notified.
Think I will add a more detailed disclaimer to any statement I make in the future.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 2
Views: 1025
Replies: 13
Voters 2
