GL-MT3000 Wireguard connects but only to LAN addresses

Router
1

I have a GL-MT3000. I configured the wireguard client in a similar manner to my other wireguard clients (iPhone, iPad, Android, Linux laptop). From all the clients I can connect to my pfsense router (which is the wireguard server) and access the LAN and WAN (yahoo, google, email, youtube, etc). With the GL-MT3000 (Once wireguard client is connected) and I connect to it with either my ihopne, android or linux PC, I can access my LAN resources such as the pfsense firewall (I am able to configure it), NAS units, etc but I am unable to get onto the internet. Is there some additional setting I have to change on either the wireguard configuration or on the GUI for the GL-MT3000? It is on the latest firmware 4.8.1.

2

Did you config Wireguard via a browser? Do you have the ability to try doing it with the Gl-Inet IOS App? I recently started using my Beryl AX again and I’ve only had success getting internet connectivity working with Wireguard and OpenVPN after using the GL-iNet IOS app to set up the VPN.

You may have an entirely different issue, just throwing this out there because your issue sounded similar to mine.

3

Hi

Please go to Admin Panel → VPN → VPN Dashboard and check whether “IP Masquerading” is enabled.

image
image1072×742 39.5 KB

If it is already enabled, please run the following command on your laptop for further checking:

# Windows (Command Prompt)
nslookup google.com
tracert 8.8.8.8

# macOS / Linux
nslookup google.com
traceroute 8.8.8.8
4

Hello, thank you for replying. Yes IP masquerading is enabled. Please see as follows the result of the commands:

$ nslookup google . com

Server: 127.0.0.53

Address: 127.0.0.53#53

Non-authoritative answer:Name: google . com

Address: 142.250.73.110Name: google . com

Address: 2607:f8b0:400a:80c::200e

and I had to stop the traceroute:

$ traceroute 8.8.8.8

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets

1 * * *

2 * * *

3 * * *

4 * * *

5 * * *

6 * * *

7 * * *

8 * * *

9 * * *

10 * * *

11 * * *

12 * * *

13 * * *

14 * * *

15 * * *

16 * * *^C

5

Thank you for the reply. I was unable to try until today. I had to make the .conf tect file and upload it with my iphone but the result is the same. Thank you

6

Could you follow this guide to connect your router to GoodCloud and share it with us so we can perform a remote check?

Please also send us the device’s MAC address and the admin panel password via private message so we can access it.

image
image632×233 19.1 KB