Dynamic dns GL-AX1800

Router VPN, DNS, Leaks
1

Connected a 4g modem/router in ip passthrough hooked to the GL router wan port. Now getting an error on the ddns check. Ip dresses are not the same.

The IP address from DDNS domain resolution is not the same as the WAN IP of the device.

You need an Internet Public IP address to use Dynamic DNS.

  • IP address from DDNS Domain Resolution

  • IPv4 49.230.128.xxx

  • WAN Interface IP address

  • Ethernet10.220.205.xx

Seems that the modem router is setting the want port ip not to the external/public ip.

Any suggestions how to solve this?

Kind regards, hrbrt

2

10.220.XXX range is local IP address, so your 4G modem/router has routing enabled. Try to switch off router mode (put on bridge mode) or turn off DHCP server, so your GL can obtain public IP address.

3

Hi, the 4g router (Ruio s10) has dhcp turned off already. Also does not have any bridge mode option. I am trying to get wireguard working by forwarding the 51820 port to the 10.220.xxx ip address, but that does not work. Do you have any other ideas how to get this working? Thanks!

4

Also you should check that 49.xxxx is not shared (CG-NAT) address… check in modem router wan IP address and check it from what's my IP site and should be the same…if not, you have CG-NAT address assigned and cannot use wire guard.

5

Search in wan settings something like operation mode, and option like bridge, IP passthrough, gateway… if is ISP provided modem, option could be hidden/locked, and only ISP support can change it. As far as I know, every modem/router device has a switch to disable router function and operate as modem only….

6

You can check it by running the Step-by-Step-Wizard on https://cgnat.admon.me

7

Thanks! Okay ,access is blocked according to the test. So using cgnat.

But I think I can still set up a wg client that will connect to the remote wg server.

And then I have to figure out how to make the settings that I can access the remote LAN and from the remote wg server access the client LAN.

Any ideas?

8

You can enable and use tailscale with your GL router to bypass CG-NAT.

9

Sorry I don’t want to change protocol. I want to get it working with WG. Should be able to do that as my wg client can connect tot the wg server so from that end I should be able to access the remote lan via the wg client that is connected. Right?

10

Yes i think it is possible, you have to try to config it like a site to site wireguard connection (a little complex but doable, basically enabling wg and firewall to reach both lan subnets). If you can establish a tunnel between them and achieve forwarding packets to both subnets, it should work.

11

Okay I set up site to site connection using client (ax1800) to wg server(axt1800) using this tutorial. The wg client connection is successful. Building a Site-2-Site network manually using two GL.iNet routers(SDK 4.X) - #7 by mkdr

But when using proxy mode auto detect on the vpn client I loose the internet connection on client side. Anyone an idea how to fix that?