Can’t access LAN addresses when passing all traffic via WG VPN tunne

@cfx69 found the issue happens when the local wan subnet has a conflict with remote LAN subnet.

To check the route to remote LAN:

ip route get 192.168.1.0/24

It should go by wgclient interface.
If it goes by eth/repeater interface, then the conflict exists.

Two workarounds:

  1. change local wan ip subnet

  2. add a route:

ip route add 192.168.1.0/24 dev wgclient scope link

The correspondent permanent setting can be done in luci, Network-routing: add a route like the following:

I think workaround 2 will be adopted in our future firmware release.

1 Like