Cannot get clients to connect to WG server on AX1800 Flint

[admon]

5G does not support port forwarding / VPN servers due to CGNAT. This is by design of cellular networks.

@admon

Mobile Networks & StarLink

If you use WireGuard over a mobile network or StarLink, you are using CGNAT . This means you do not have a public IP address and therefore cannot receive incoming connections. You can only establish outgoing connections. The router behind the mobile network or StarLink router cannot be used as a server but can be used as a client.

An alternative is to use services like Tailscale or AstroRelay . These services allow devices behind CGNAT networks to communicate with each other. Tailscale is a free service based on WireGuard and offers simple configuration. Not every router supports Tailscale, but most GL.iNet routers can use Tailscale.

If you're unsure whether you're affected by CGNAT, you can test it here .

Other way would be to try VPN over IPv6 only. But this might create a hugh mess because IPv6 is not completely supported yet.