# Connecting to LAN resources through Wireguard VPN server? **URL:** \ **Category:** Router\ **Created:** [June 20, 2024, 1:42pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815 "2024-06-20T13:42:00Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![SomebodyInGNV](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a88e4f/32.png) [@SomebodyInGNV](https://forum.gl-inet.com/u/SomebodyInGNV)\ **Post date:** [June 20, 2024, 1:42pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/1 "2024-06-20T13:42:00Z")
I set up a GL.iNET AX1800 as a Wireguard server. I know it's working because I can connect using the Wireguard app on my phone. What I don't know is how to connect to the resources behind the router through the VPN. I'm not using DDNS on the router but am using it on my Synology NAS. (GL-iNET's DDNS is really primitive. No third party DDNS? Wow.) Connecting to the DDNS host name takes me to the router web page where I can log in, so the VPN is obviously connected and the Synology DDNS setup works. I know how to open ports to the public internet but would rather not. That's why I have the VPN. How do I connect to my NAS as a network drive, for example, or to it's web GUI? All of that works fine within my LAN using Windows and allowing network discovery for file access. Does your answer about access change if the Windows user account is not administrator? I set up the Wireguard client app as administrator, then use the laptop as non-administrator. The tunnel shows as active when I hover over the network icon in the system tray. Ultimately, I want to set up a GL-AR750S travel router as a Wireguard client so that everything connected to the travel router using DHCP can transparently connect to the NAS behind the VPN server. I'd greatly appreciate any knowledge you can share. References to specific educational resources are welcome, as well. ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [June 20, 2024, 1:44pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/2 "2024-06-20T13:44:34Z")
Make sure to enable _Remote Access LAN_ in your WireGuard server settings. ![image](https://forum-static.gl-inet.com/original/3X/6/9/6931cbd569a1e184ab51f5c9e268b68135fb3080.png) ---
**Author:** ![SomebodyInGNV](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a88e4f/32.png) [@SomebodyInGNV](https://forum.gl-inet.com/u/SomebodyInGNV)\ **Post date:** [June 20, 2024, 2:09pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/3 "2024-06-20T14:09:41Z")
Thanks, but it's already on. Considering the client-to-client option, it sounds like it's either/or. Does that mean it's set up on to connect between sites and doesn't support individual clients? If so, is it mutually exclusive to set up a site-to-site VPN between the server and a GL-AR750S travel router as a client, while also hoping to connect directly from my laptop when it's connected to other public internet sources. If I can't do both, do I have to set up the server as client-to-client and install client software on all client devices? (They're aren't many. I was just hoping for a more elegant approach.) ![image](https://forum-static.gl-inet.com/original/3X/c/7/c7f336a69c4a2671dbc342e723cffdbf96bedd2f.png) ---
**Author:** ![alzhao](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/5f9b8f/32.png) [@alzhao](https://forum.gl-inet.com/u/alzhao)\ **Post date:** [June 21, 2024, 3:12am UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/4 "2024-06-21T03:12:10Z")
For the NAS, can you ping its IP address? According to [Building a Site-2-Site network manually using two GL.iNet routers(SDK 4.X) - #9 by hansome](https://forum.gl-inet.com/t/building-a-site-2-site-network-manually-using-two-gl-inet-routers-sdk-4-x/31479/9) You should enable Client to Client in the Server settings. ---
**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\ **Post date:** [June 21, 2024, 3:58am UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/5 "2024-06-21T03:58:32Z")
Open Luci and look on the Firewall tab you need to allow the WG server to route through networks like this and set forward to accept: [http://192.168.8.1/cgi-bin/luci/admin/network/firewall](http://192.168.8.1/cgi-bin/luci/admin/network/firewall) ![image](https://forum-static.gl-inet.com/original/3X/e/2/e29dcee82004b982660633ad5044caf0e0c71acb.png) Other from that, you also need to set allowed ips properly on both the WG clients and the WG server. Example for clients: AllowedIPs = 10.0.0.1/32, 192.168.8.1/32, 192.168.100.0/24, 192.168.10.0/24 So all these are routed through the WG server and you can reach them behing, in this case 192.168.100.255 and 192.168.10.255 and 10.0.0.1 and 192.168.8.1. If you have another router connected via WG to the server and want to reach it too from clients you need to add a manual route like this ![image](https://forum-static.gl-inet.com/original/3X/0/5/056451f09735e04a47af33c6179ec281f3a6647c.png) On the clients set each allowed ips like this: ![image](https://forum-static.gl-inet.com/original/3X/5/6/56c231b654f962d08940bc349332dd0f98579e52.png) or example with the other router: ![image](https://forum-static.gl-inet.com/original/3X/4/1/4166a636cdfc49456abb28e6dceef36748f058da.png) ---
**Author:** ![SomebodyInGNV](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a88e4f/32.png) [@SomebodyInGNV](https://forum.gl-inet.com/u/SomebodyInGNV)\ **Post date:** [June 21, 2024, 1:50pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/6 "2024-06-21T13:50:41Z")
I think I'm understanding this, but it's still fuzzy. Am I correct in thinking the allowed ip addresses configured in Luci apply only to connections through the VPN? ---
**Author:** ![SomebodyInGNV](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a88e4f/32.png) [@SomebodyInGNV](https://forum.gl-inet.com/u/SomebodyInGNV)\ **Post date:** [June 21, 2024, 1:59pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/7 "2024-06-21T13:59:21Z")
Thanks for the reference to that guide. I haven't digested it yet but I think it will help a lot. ---
**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\ **Post date:** [June 21, 2024, 8:19pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/8 "2024-06-21T20:19:55Z")
"allowed ips" is a bit misleading in my oppinion especially for someone who is new to wireguard, a better word would have been "routed ips". the allowed ips you set for both client and server are basically routes wireguard sets. all these ips are routed through the tunnel and become reachable. if you set 0.0.0.0/0 for example everything will be routed through the tunnel. this could wanted for example on client side, if you want to route everything through the tunnel even internet access. ---
**Author:** ![SomebodyInGNV](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/a88e4f/32.png) [@SomebodyInGNV](https://forum.gl-inet.com/u/SomebodyInGNV)\ **Post date:** [June 21, 2024, 8:43pm UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/9 "2024-06-21T20:43:31Z")
Thanks for the details. I definitely don't want to route all traffic. My home ISP is cable with lousy upload speeds. That would throttle every going to the connected clients. I have to accept it for files downloaded from home but not everything else. ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 11:39am UTC](https://forum.gl-inet.com/t/connecting-to-lan-resources-through-wireguard-vpn-server/43815/10 "2025-10-29T11:39:49Z")