Hi everyone,

I'm using a Deco X50 as a WireGuard server and I'm encountering the following issue:

Setup:

• Model: Deco X50 (acting as the main router, establishes the PPPoE connection and has the public IP address).
• WireGuard Server on Deco X50: Enabled and configured.
• Client Access in Deco WireGuard Server settings: The "Internet and Home Network" option is enabled for connected clients.
• WireGuard Client: An external router (e.g., a GL.iNet device), configured for a full tunnel (AllowedIPs = 0.0.0.0/0 on the client-side for the server peer). The client is using a public DNS server (e.g., 1.1.1.1) in its WireGuard configuration for testing purposes.

Observed Behavior:

1. The WireGuard connection from the client to the Deco X50 server establishes successfully and remains stable.
2. The WireGuard client can successfully access devices on the Deco X50's local network (LAN) (e.g., other computers, NAS, etc., within the Deco's subnet).
3. However, the WireGuard client has NO access to the internet via the VPN connection. Websites do not load, and pings to external IP addresses fail.

Summary:

The Deco X50 WireGuard server appears to correctly route traffic from the VPN client to its own LAN, but the forwarding/NAT of traffic from the VPN client to the internet (WAN) is not working, even though the corresponding option ("Internet and Home Network") is enabled.
 

• Has anyone else experienced similar issues with the Deco X50 as a WireGuard server?
• Are there any known solutions, specific settings (perhaps in hidden menus or specific firewall configurations) that might be necessary for this to work?
• Could this indicate an issue with the current Deco X50 firmware?

I would be grateful for any advice or potential solutions!
 

Best
Claas