I can't access the interface of a Pi device attached to the LAN

[ConfusedGLuser]

GL-SFT1200 and I use 4.8.3 beta 3. I am trying to attach an external Pi that is running FriendlyWrt with docker. I would like to use Docker this device to set up certain services.

The Pi goes from the Pi WAN to to GL-SFT1200 LAN.

My problem is that I cannot access the FriendlyWrt device from my Laptop (using WiFi) while the VPN is on, and I usually have the VPN on. I am not sure if I can access it without VPN on. Currently the VPN has the kill switch on.

The Pi is assigned to 192.168.8.109 and when I type that in, I can’t access it. Also by default the Pi device interface is 192.168.2.1. I also have LuCI installed on GL-SFT1200 and I’m not sure if this is causing the problem. I have recently gotten “bad gateway” errors when trying to access LuCi, but then it let’s me access OpenWrt.

I also want both device to get their internet from the VPN. I don’t want my shady internet provider, that has terrible support and terrible speeds and treats me like garbage, to be able to sell any data in any context.

What is the best way to handle the situation?

[will.qiu]

Hi

By default, the SFT1200 does not block communication between LAN devices, whether the VPN is enabled or not.

Please check the following:

1. Make sure your laptop is connected to the Main Wi-Fi rather than the Guest Wi-Fi.
2. If your laptop is on the Main Wi-Fi (with an IP like 192.168.8.x) and the Pi is connected to a LAN port, the issue may not be related to the SFT1200. In that case, check whether the Pi allows access from the WAN.

Typically, you’ll need to go to the Pi’s LuCI → Network → Firewall:
(Screenshot from the BE9300 LuCI interface; the FriendlyWrt interface on the Pi should be similar.)

1. Change the Input setting for the WAN zone to Accept. If you’re not familiar with firewall settings, be aware that this will fully expose the device to the WAN.
   

   

2. If you only need to open specific ports for accessing the Pi’s web interface or services running in Docker, you can instead create rules in Traffic Rules to open those ports for the WAN zone.