WireGuard Server (Archer AX72 Pro) Not Connecting to Client

WireGuard Server (Archer AX72 Pro) Not Connecting to Client

WireGuard Server (Archer AX72 Pro) Not Connecting to Client
WireGuard Server (Archer AX72 Pro) Not Connecting to Client
Monday - last edited Monday
Model: Archer AX72 Pro  
Hardware Version: V1
Firmware Version: 1.4.5

NOOB here, so trying to figure out what I am doing wrong setting up a WireGuard tunnel.

 

I have an Archer AX72 Pro and have set it up as a WireGuard Server using all of the standard settings outlined in this article (https://www.tp-link.com/us/support/faq/3772/). I then setup a BE3600 Travel Router as the WireGuard client using the same standard settings. When I plug the travel router into my home modem (Xfinitiy ISP), I can connect to the Archer via the WireGuard and everything appears to work. However, when I take the travel router and connect to a different router or wifi (different internet) the WireGuard will not connect. Below are a few screenshots of the setting. Can someone help me figure out why this is not connecting? I am at a loss.

 

 

 

  0      
  0      
#1
Options
3 Reply
Re:WireGuard Server (Archer AX72 Pro) Not Connecting to Client
Yesterday

Hello @DAshford, thank you for posting on the TP-Link Community.

 

Regarding the WireGuard VPN connection in your described network, I have some questions before I can provide a clear answer.

 

Are the AX72 Pro and the BE3600 Travel Router (I assume its model is TL-WR3602BE. Correct me if not) in different networks?

 

When you connect the BE3600 Travel Router/TL-WR3602BE to a different router or wifi (different internet), what is the working mode? Is it the same as when it is connected to the Xfinity ISP modem?

 

What is the WAN IP address on the BE3600 Travel Router/TL-WR3602BE when it's connected to a different router or wifi (different internet)? Please make sure you still have a public WAN/Internet IP address. Otherwise, the VPN Client won't connect to the server.

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Introducing AI QoS: Elevate Your Gaming Experience on the Archer GE800 Gaming Router! Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router Archer AX90 New Firmware Added Support for EasyMesh and Ethernet Backhaul If you found a post or response helpful, please click Helpful (arrow pointing upward icon). If you are the author of a topic, remember to mark a helpful reply as the "Recommended Solution" (star icon) so that others can benefit from it.
  1  
  1  
#3
Options
Re:WireGuard Server (Archer AX72 Pro) Not Connecting to Client
19 hours ago - last edited 19 hours ago

  @Kevin_Z Thank you for your questions. Below are the answers to them, but please let me know if you have any more questions. I appoligize for my confusion as I am a noob when it comes to setting up networks like this.

You are correct that the WireGuard is not connecting when they are on different networks. However, it does connect when on the same network. The travel router is set to the same working mode, as a router, in both cases. 

I am not seeing a WAN address, but the LAN address is IPv4 LAN IP:192.168.1.1. Can you please tell me where to locate the LAN address in the router interface? Also, I am not sure if I have a public WAN address. How can I determine if it is public or not? I am attaching the WireGuard details.

Note that the endpoint is the internet address of my home internet. Also. I should note I am connected to a wifi currently with the travel router.image

09f05980a9df415baf891b1f5643c1fb

  1  
  1  
#4
Options
Re:WireGuard Server (Archer AX72 Pro) Not Connecting to Client
3 hours ago

 

DAshford wrote

  @Kevin_Z Thank you for your questions. Below are the answers to them, but please let me know if you have any more questions. I appoligize for my confusion as I am a noob when it comes to setting up networks like this.

@DAshford That is not a problem. Believe me, you've already done it very well.yes

 

DAshford wrote

You are correct that the WireGuard is not connecting when they are on different networks. However, it does connect when on the same network. The travel router is set to the same working mode, as a router, in both cases. 

I assume it's not. Generally, when the WR3602BE is working in Router Mode, it cannot connect to the host router wirelessly. It must be connected through the WAN port. When it's connected to the host router via Wi-Fi, I believe it is either in Hotspot Mode (WISP Mode), Range Extender Mode, or Client Mode. 

 

Could you please log in to its web interface to verify the working mode when it is on different networks from the Archer AX72 Pro? If it is not on one of the modes I mentioned above, please try changing to Hotspot Mode (WISP Mode), then check again whether it connects to the WireGuard Server successfully.

 

DAshford wrote

I am not seeing a WAN address, but the LAN address is IPv4 LAN IP:192.168.1.1. Can you please tell me where to locate the LAN address in the router interface? Also, I am not sure if I have a public WAN address. How can I determine if it is public or not? I am attaching the WireGuard details.

When you go to Advanced > Network > Status page, can you find Ethernet? If yes, please show me a picture.

 

If you cannot find Ethernet either, please try logging into the web page of the Archer AX72 Pro, go to the Advanced > Network > DHCP Server page, and scroll down to find the DHCP Client List. Show me the IP address for the WR3602BE.

 

You can use this site to verify whether the IP address on that page is a public one or a private one: https://en.wikipedia.org/wiki/IP_address. The IP addresses outside these are public IPs

a75d8fa373de4f1481d2b34b4da32cbe

 

BTW, is the VPN showing connecting on the WR3602BE's web page?

Nice to Meet You in Our TP-Link Community. Check Out the Latest Posts: Introducing AI QoS: Elevate Your Gaming Experience on the Archer GE800 Gaming Router! Connect TP-Link Archer BE550 to Germany's DS-Lite (Dual Stack Lite) Internet via WAN Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router Archer AX90 New Firmware Added Support for EasyMesh and Ethernet Backhaul If you found a post or response helpful, please click Helpful (arrow pointing upward icon). If you are the author of a topic, remember to mark a helpful reply as the "Recommended Solution" (star icon) so that others can benefit from it.
  1  
  1  
#5
Options