Domain based VPN policydoes not work on AX1800 Flint

Domain based VPN policydoes not work on AX1800 Flint
I chose this one and fill in the domains I want to use the VPN but it does not work

Add ipecho.net to the domain policy & then check http://ipecho.net/plain . Is that the VPN’s IP?

(Also… really, my guy? This ain’t a dating site. I doubt you’ll get many ‘hook ups’ here.)

It’s my IP address instead ):

Is it the same public IP when you flip the policy back to Global?

Also, can you post the output of wg show? It provides a touch more detail than just the Dashboard:

root@GL-AXT1800:~# wg show
interface: wgclient
  public key: [redacted]=
  private key: (hidden)
  listening port: 32

peer: [redacted]=
  endpoint: 37.19.211.7:51820
  allowed ips: 0.0.0.0/0
  latest handshake: 1 minute, 49 seconds ago
  transfer: 1.69 GiB received, 503.36 MiB sent
  persistent keepalive: every 25 seconds

102.97 MiB downloaded… so you’re definitely connected to a WG server as expected. Sometimes a misconfigured wgclient will still connect but not allow traffic. Does your public IP still show when the policy flipped back to its default, Global Policy?

2023-07-08 00_56_26-GL.iNet Admin Panel - Chromium

(Check via curl http://ipecho.net/plain; echo ; it’s faster than refreshing a web page).


@alzhao @yuxin.zou @rain @radishman : Where’s the conf for the list of IP/domains for that policy? It used to be /etc/route_policy/domain_name/via_vpn/manual-list.conf in firmware 3.216.

I switched to the option redirecting all my Internet to VPN. That’s 102 Mb downloaded. When I switched to Global Policy, the VPN IP was shown. That’s why I said there was a problem with domain based VPN policy.

And I believed there was nothing wrong with my WG server. Because I used WG client app on my PC and I could connect successfully to the server to use.

That seems to be the case. It would appear to be a regression from firmware 3.216; that’s the last time I’ve used that policy. GL reps were already ping’d so I’m sure they’ll see this thread eventually.

What is the firmware version you are using?

Also pls don’t try IP leak test on the router, you should test on the devices connected to the router.

@alzhao I’m using this one

4.2.1 is the latest stable firmware; give that a go.

Personally speaking I don’t use the beta or snapshot builds unless I’m at an impasse w/ the stable ver.

Nothing changed

hello? Anyone help me here?

Firmware 4.2.3-release5 is out now. Does it still not work?

How can I download it?

Ideally thru GL GUI → System → Upgrade but failing that:
https://dl.gl-inet.com/?model=ax1800

I upgraded to the release 5, nothing changed

Device: Flint (GL-AX1800)
Firmware: 4.2.3-release5

VPN via WG Client IP

Policy

Result

Result_2023-07-18 12_54_36-ipecho.net_plain - Brave

Notes

  • I had to disconnect & reconnect WG Client for policy additions/edits/changes to take effect.
  • What you’re currently reading was posted w/ WG Client running on a Flint while behind a Slate AX also running a WG Client (a la VPN within VPN).


Mine