Wireguard do not route internet

Wireguard do not route internet

Wireguard do not route internet
Wireguard do not route internet
2024-03-29 12:42:07 - last edited 2024-03-29 15:33:05
Tags: #VPN
Model: OC200  
Hardware Version: V1
Firmware Version: 5.13.24

Hello,
I'm having little issue with Wireguard setup which I did not manage to find a solution for.

 

I have a wireguard running on my omada with assigned local IP 192.168.95.10
this IP is totally made up just to be unique... I have VLANs .10. .20. .30. and .40. 

 

When my client configuration is as follows

 

[Interface]
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Address = 192.168.95.11/24
DNS = 1.1.1.1

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = [my WAN IP address]:51820

 

everything is fine, all working.

 

 

But, it is also routing an internet via wireguard, so I am dependent on the upload speed of my local home network.
So I want to route via wireguard only the "local" traffic, ie. have an access to RDP to my desktop, access the NAS etc...

 

But internet I want to be routed via the ISP where I am currently connected to with my laptop.

 

Therefore I tried to replace in the config
AllowedIPs = 0.0.0.0/0, ::/0
with 
AllowedIPs = 192.168.20.1/24, 192.168.30.1/24

 

this keeps my internet with the "current" ISP but it does not connect to my home LAN, in other words... it does not work.

 

I have also tried to put into AllowedIPs the wiregueard address, 192.168.95.10, the gateway to my ISP... various meaningful and silly things... but nothing seems to be the key to this challenge.


Is this what I am trying to achieve even possible? What I might be doing wrong?

Thanks,
Jan

  0      
  0      
#1
Options
1 Accepted Solution
Re:Wireguard do not route internet-Solution
2024-03-29 15:21:09 - last edited 2024-03-29 15:33:05

  @jan7456 

You also need to allow 192.168.95.0/24

AllowedIPs = 192.168.20.1/24, 192.168.30.1/24, 192.168.95.0/24

 

Recommended Solution
  0  
  0  
#2
Options
2 Reply
Re:Wireguard do not route internet-Solution
2024-03-29 15:21:09 - last edited 2024-03-29 15:33:05

  @jan7456 

You also need to allow 192.168.95.0/24

AllowedIPs = 192.168.20.1/24, 192.168.30.1/24, 192.168.95.0/24

 

Recommended Solution
  0  
  0  
#2
Options
Re:Wireguard do not route internet
2024-03-29 15:32:59

  @MR.S 

 

thats it! thank you very much!

  0  
  0  
#3
Options