Static route for VPN interface on ER605
Greetings,
Thank you for taking the time to open this.
I was wondering if it was possible to add a static route for a VPN interface on the ER605? - the drop down gives me an option for WAN or LAN interfaces, but not the VPN interface that's confirmed to be working.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Thank you for your post. However, I’d like to point out that adding a WireGuard VPN tunnel to static routing is currently not supported. Alternatively, you can configure Allowed IPs in WireGuard to specify which destination subnets should be forwarded.
- Copy Link
- Report Inappropriate Content
@Ethan-TP Thank you so much. I tried this just now and it worked.
- Copy Link
- Report Inappropriate Content
@Ethan-TP Is it possible to allow addresses to multiple IP ranges? I.e. If I wanted to allow 172.10.1.0/24 and 172.10.10.10/32, how would I do that?
I'm using Wireguard. I tired adding multiple peers, but that didn't work. It seems I need to allow multiple IPs on one peer.
I noticed the IPSEC config on ER605 allows mulitiple CIDRs.
- Copy Link
- Report Inappropriate Content
@Ethan-TP possible?
- Copy Link
- Report Inappropriate Content
As mentioned in another thread, it is currently not possible.
- Copy Link
- Report Inappropriate Content
It is possible to use different subnets. You need to configure them correctly on the Peers side and then enter the same settings on the Server side. On the Peers side, separate the different subnets with commas.
- Copy Link
- Report Inappropriate Content
@Ethan-TP Thank you so much for the reply. The UI doesn't allow commas unfortunely. Please see the screenshot. 
- Copy Link
- Report Inappropriate Content
Subnet management is supported in Controller mode, but it’s not yet available in Standalone configuration. You can try adjusting the subnet mask to see if that meets your needs. If not, Irecommend creating a new WireGuard VPN tunnel pointing to another subnet.
- Copy Link
- Report Inappropriate Content
@Ethan-TP I just downloaded the Omada Controller software and found the VPN setup. I think I'll take that route, though I'm sure the additional VPN tunnel would have worked as well.
Thank you for the information and for your time.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 1
Views: 259
Replies: 9
Voters 0
No one has voted for it yet.