GL-AXT1800 with FritzBox

BerndLo · 2022-12-20T15:28:33.463Z

Hi, I’m trying to set up WireGuard VPN connection via AXT1800 to FritzBox 7590. Try to set up network connection. FritzBox: 192.168.2.x and AXT1800 192.168.8.y. Up to now no success. VPN client in AXT connects to FritzBox. With device in 192.168.8.y no access to internet and Fritzbox…

agent_smith · 2022-12-20T17:28:52.707Z

Hi!
What is your VPN provider?

BerndLo · 2022-12-20T18:00:36.745Z

The FritzBox is the WireGuard server. No external provider

agent_smith · 2022-12-20T19:10:03.747Z

If the Glinet router works as a VPN server and it is behind an upstream ( Main Router) in your case Fritz Box 7590, that shares the Internet to Glinet devices, you need to allow in your benutzeroberfläche von Fritzbox (Internet > Freigaben > Neue Freigabe ) the port (in your case standart Wireguard UDP port 51820 ) for the IP address of your Glinet router AXT1800. If you still need help after these manipulations, you can send me a private message. If your language is German, I will be able to answer your questions more correctly.
I have an AXT1800 as a Wireguard Server behind Frizbox, it works perfect.

diver68 · 2022-12-21T06:43:29.763Z

@agent_smith
Nice for you, but that was not the question…
@BerndLo
Did you read that?
This needs to be pinned.

Other issues:

Your WireGuard IP cannot be within the 192.168.8.X or 192.168.9.X range for default GL.iNet setups. Either change the WireGuard range, or change the LAN.
If you’re running your own server, and you can connect to (ping) the Wireguard endpoint, and you’re using 0.0.0.0/0 as your “Allowed IPs”, make sure the outbound port forwarding rules on your server are correct. See this guide for help.
If you are testing and it works from your phone but not from your router, try connecting your router through your phone. Sometimes trying to access your public IP from your LAN behaves in strange ways.

BerndLo · 2022-12-21T09:00:40.397Z

@diver68
Thanks for your comment. Sadly I’m not an expert on all that stuff… Maybe some additional comments. The final use of the AXT1800 is to connect from outside (any point of the globe) via Wireguard VPN to my home (Germany) to get a German IP for AppleTV or FireTV…

BerndLo · 2022-12-21T09:07:26.510Z

@agent_smith
also thanks, see my comment to @diver68

diver68 · 2022-12-21T10:23:47.624Z

Hi Bernd

please check my working config AXT1800 > Fritzbox 6591, I have the same demands as you. Please add in your config the Endpoint = xxxxxxxxxxxx@myfritz.net:xxxxxx
10.0.2.1 is the IP of the Fritzbox and 10.0.4.1 the GL.Inet AXT1800. If you have a diferent DNS Server as the FB, then you need to change that as well.

[Interface]
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxx
ListenPort = 51414
Address = 10.0.2.1/24
DNS = 10.0.2.1,10.0.4.1

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxx
PresharedKey = xxxxxxxxxxxxxxxxxxxxxxxxx
Endpoint = xxxxxxxxxxxxxxxx:xxxxxx
AllowedIPs = 10.0.4.0/24,0.0.0.0/0
PersistentKeepalive = 25

BerndLo · 2022-12-21T13:42:58.083Z

Hi, I’ll try and let you know

BerndLo · 2022-12-21T14:26:11.366Z

@diver68 I tried it. needed to modify, but still no access to internet

[Interface]
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxx
ListenPort = 62687
Address = 192.168.8.1/24
DNS = 192.168.2.1,192.168.8.1

[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
PresharedKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Endpoint = xxxxxxxxxxxxxxx.myfritz.net:xxxxxxxxx
AllowedIPs = 192.168.8.0/24,0.0.0.0/0
PersistentKeepalive = 25

BerndLo · 2022-12-21T15:08:41.145Z

if I enter Interface Address like you, I open AXT1800 with FB IP

BerndLo · 2022-12-21T15:33:26.592Z

I deleted DNS=fritz.box, now it seems to work…

diver68 · 2022-12-21T15:56:21.336Z

Great I have a RPi4 with pihole as DNS, that’s why I wrote for you “fritz.box”, as synonym for the IP of the Router (Fritz!Box).

BerndLo · 2022-12-21T17:04:01.234Z

Thanks for your great support

alzhao · 2022-12-22T02:04:38.773Z

I edited your post and removed DNS-fritz.box and marked it as solution.

matze365 · 2024-12-26T07:27:43.373Z

Good morning, I would like to enable a connection to my moms Fritzbox. I was able to setup up a Wireguard connection and I can ping the Fritzbox via my GL INET GL-MT300N-V2. I cannot get internet access. What do I need to to get internet access? Have a great day, Matt

alzhao · 2024-12-26T08:39:48.818Z

As the solution of this post says, you need to change the dns settings if the wireguard.

If you are not sure, pls post your wireguard config here. Please mark your endpoint and keys.

matze365 · 2024-12-26T09:54:07.723Z

This is now working!!! thank you for the hint!

[Interface]
PrivateKey = xxx
Address = 192.168.178.201/24
DNS = 192.168.178.1

[Peer]
PublicKey = xxx
PresharedKey = xxx
AllowedIPs = 0.0.0.0/0
Endpoint = xxxx.myfritz.net:50728
PersistentKeepalive = 25