@firefox111 

Wireguard is already creating a proper routing between those two routers, therefore if the VPN configuration is proper, you should be able to easily access any device.

My guess is that your OpenVPN configuration is incorrect.

Can you share some screenshots on your OpenVPN server configuration? Blur out any sensitive data ofc.

Cheers

This is the sever OVPN configuration of the 192.168.5.0/24 server where that client on the picture is connected to.

And on the other side:

  @firefox111 

IMO problem is with Local Network setting of OpenVPN server. In order to access other location (192.168.4.0) while being connected to your primary location via OpenVPN (192.168.5.0) you should have added also the network of the other location (192.168.4.0) to your server's config.

But I just checked in ER605 firmware emulator that in Standalone Mode you can include only one Local Network... Such limitation do not exist in Controlled mode... weird.

As a workaround, have you tried to enable "Full Mode" on that server to route whole traffic from OVPN client via your ER605?

Cheers

Thanks for your suggestion.  I just enabled Full Mode.  Still cannot traverse to the 192.168.4.0/24 network from client in 192.168.5.0/24 network!

  @firefox111 

Just to clarify cuz I wa confused by your last answer.

1. I understood that if you are in 192.168.5.0/24 network, you can easily reach devices from 192.168.4.0/24 network and vice versa since those are connected via WireGuard, is that correct?

2. And I understood that you have a problem when you are connecting via OpenVPN to 192.168.5.0/24 network - then you can reach devices in 192.168.4.0/24 network (the same when you are connected via OVPN to 192.168.4.0/24 network and try to access 192.168.5.0/24 network), right?

If that's the case, I just tested that "problem" and everything works fine while using "Full Mode" option in OpenVPN server. The devices in external network (behing WireGuard connection) were fully accessible.

Make sure you have saved the changes to OpenVPN server, try to disable the server and enable it again.

Let me know if I understood you properly and if anything changed.

Cheers

  @firefox111 

you haven't said anything about how lan-lan is connected, but in my case I'm using ipsec site to site. to achieve what you want you have to include the vpn ip pool in the site to site configuration on both routers. here I'm showing how the configuration is on the router with openvpn server, i.e. the router the client connects to.

and the remote router

RaRu wrote

  @firefox111 

 

Just to clarify cuz I wa confused by your last answer.

 

1. I understood that if you are in 192.168.5.0/24 network, you can easily reach devices from 192.168.4.0/24 network and vice versa since those are connected via WireGuard, is that correct?  Correct. No problem reaching the devices from all sides of the wireguard VPN connection.

 

2. And I understood that you have a problem when you are connecting via OpenVPN to 192.168.5.0/24 network - then you can reach devices in 192.168.4.0/24 network (the same when you are connected via OVPN to 192.168.4.0/24 network and try to access 192.168.5.0/24 network), right?

            Right. When OVPN client is connected to the 192.168.5.1 router, that client cannot access the devices in the 1992.168.4.0/24.  

 

If that's the case, I just tested that "problem" and everything works fine while using "Full Mode" option in OpenVPN server. The devices in external network (behing WireGuard connection) were fully accessible. Not in my case!

 

Make sure you have saved the changes to OpenVPN server, try to disable the server and enable it again.

Let me know if I understood you properly and if anything changed.  I thought when clicking Ok, it restarts the OVPN server because when I enabled the "Full" mode, my client OVPN connection restarted at that moment.

 

Cheers

  @RaRu 

MR.S wrote

  @firefox111 

 

 

you haven't said anything about how lan-lan is connected, but in my case I'm using ipsec site to site. to achieve what you want you have to include the vpn ip pool in the site to site configuration on both routers. here I'm showing how the configuration is on the router with openvpn server, i.e. the router the client connects to.

 

 

 

 

 

  @MR.S 

The last two sentences of my Original Post: L2L is on Wireguard.  Client is OVPN.

Let me look at the Wireguard configuration again. With this Wireguard connection, one side can connect to any device connected to the other side and vice versa.  However if a remote OpenVPN client is connected to either side, that client cannot access the devices on the far side of the Wireguard L2L.

In Wireguard configuration in the current firmware version of the ER605, there is no setting for "Local Networks".

Shall I switch to ipSec L2L?