# Different VPN per site? Flint AX & WireGuard

**URL:** <https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050>\
**Category:** Router\
**Created:** [November 9, 2023, 11:37pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050 "2023-11-09T23:37:03Z")\
**Posts on this page:** 8\
**Page:** 2

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [May 2, 2024, 2:19pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/21 "2024-05-02T14:19:30Z")

</div>

oh… I think you need some modifications for this I remember 🙂

you need to install first:

`opkg install pbr-iptables` and over this you install `luci-app-pbr`, if you don’t do it this way the nft version gets installed which does not work.

---

<div class="post-metadata">

**Author:** ![4rtz1z](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/4/b3f665/32.png) [@4rtz1z](https://forum.gl-inet.com/u/4rtz1z)\
**Post date:** [May 2, 2024, 2:19pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/22 "2024-05-02T14:19:53Z")

</div>

that’s makes sense, the pbr one for nft

---

<div class="post-metadata">

**Author:** ![4rtz1z](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/4/b3f665/32.png) [@4rtz1z](https://forum.gl-inet.com/u/4rtz1z)\
**Post date:** [May 2, 2024, 2:33pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/23 "2024-05-02T14:33:50Z")

</div>

@xize11 what does br-lan.XX means ?

so it seems all set up but i got this :

> **ERROR: The ipset name ‘pbr\_wgclient\_4\_dst\_net\_cfg056ff5’ is longer than allowed 31 characters!**

---

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [May 2, 2024, 2:50pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/24 "2024-05-02T14:50:02Z")

</div>

> [@4rtz1z](#):
>
> what does br-lan.XX means ?

these are devices which I want pbr to ignore which does not reflect your config, however in your configuration this might not be necessary, I did this because I do have more than 10 networks 🙂 and pbr wants to loop through every if/up event when the boot process started which easily takes me 10 minutes if i had these options removed 😛

> [@4rtz1z](#):
>
> ERROR: The ipset name ‘pbr\_wgclient\_4\_dst\_net\_cfg056ff5’ is longer than allowed 31 characters!

ah you need to make your rule names smaller, I believe in newer versions this might have been changed again.

---

<div class="post-metadata">

**Author:** ![4rtz1z](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/4/b3f665/32.png) [@4rtz1z](https://forum.gl-inet.com/u/4rtz1z)\
**Post date:** [May 2, 2024, 2:57pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/25 "2024-05-02T14:57:08Z")

</div>

> [@xize11](#):
>
> ah you need to make your rule names smaller, I believe in newer versions this might have been changed again.

i tried making it less character rule names but it still show the error, i tried search on google and found on forum openwrt the interface name that needs to be shorten

```auto
root@GL-AX1800:~# service pbr restart
Removing routing for 'wan/eth0/192.168.55.1' [✓]
Removing routing for 'wgclient/XXXXXXXXXXXXXX' [✓]
Restarting dnsmasq [✓]
pbr 1.1.5-1 (iptables mode) stopped [✓]
Command failed: Not found
Using wan interface (on_start): wan
Found wan gateway (on_start): 192.168.55.1
Setting up routing for 'wan/eth0/192.168.55.1' [✓]
Setting up routing for 'wgclient/XXXXXXXXXXXXXXXXX' [✓]
Routing 'Bank' via wan [✓]
Routing '150' via wgclient [✓]
Routing '160' via wgclient [✓]
Routing 'TWIP' via wgclient [✓]
Routing 'TWD' via wgclient [✓]
Routing 'TGIP' via wgclient [✓]
Routing 'TGD' via wgclient [✓]
Routing 'TR' via wgclient [✓]
Routing 'IPL' via wgclient [✓]
Routing 'OWRT' via wgclient [✓]
Restarting dnsmasq [✓]
pbr 1.1.5-1 monitoring interfaces: wan wgclient
Command failed: Invalid argument
pbr 1.1.5-1 (iptables mode) started with gateways:
wan/eth0/192.168.55.1 [✓]
wgclient/XXXXXXXXXXXX
ERROR: The ipset name 'pbr_wgclient_4_dst_net_cfg056ff5' is longer than allowed 31 characters!

```

---

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [May 2, 2024, 3:20pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/26 "2024-05-02T15:20:18Z")

</div>

i guess it should be fine, it is because its called wgclient but then with the automatic attachment behind it, though from what i can remember since i used this type of setup it still wil work but that was from some time ago.

---

<div class="post-metadata">

**Author:** ![4rtz1z](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/4/b3f665/32.png) [@4rtz1z](https://forum.gl-inet.com/u/4rtz1z)\
**Post date:** [May 2, 2024, 3:29pm UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/27 "2024-05-02T15:29:00Z")

</div>

yup same thought, i’ll try traceroute every each of the config and all routed thru wireguard, and by the way THANK YOU SO MUCH for everything 😊

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 11:38am UTC](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050/28 "2025-10-29T11:38:33Z")

</div>



[Previous page](https://forum.gl-inet.com/t/different-vpn-per-site-flint-ax-wireguard/35050.md?page=1)
