No Exclusive IP Traffic over wireguard to Fritzbox

Technical Support for Routers VPN, DNS, Leaks
1

Hello,

I got an AXT 1800 as a travel router and want it to use my Fritzbox at home as a VPN server to access my local NAS and avoid geo blocking (using free media streaming from Germany).

How are my network set up:

FB at home: 192.168.0.0/24 and FB itself 192.168.0.1
AXT 1800 LAN: 192.168.10.0/24 ACT 1800 itself 192.168.10.1

I set a direct connection not a network with my Fritzbox.

I got working connection with the following setting:

[Interface]
Address = 192.168.0.206/24
ListenPort = 55804
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxx=
DNS = 192.168.0.1
MTU = 1420

[Peer]
AllowedIPs = 0.0.0.0/0
Endpoint = xxxxxxxxxxxxxxxxxxxxxxxxx.myfritz.net:55804
PersistentKeepalive = 25
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxx=
PresharedKey = xxxxxxxxxxxxxxxxxxxxxxxxx=

I can access my FB router config page, I can access my samba shares at home etc.

However, compared to other connections from a tablet of phone: If I check my ip address, I do not get die external IP of my Fritzbox but the one of my used network device (I used my mobile phone).

If I force the AXT 1800 with global VPN settings to prevent any traffic outside the VPN tunnel I can not get any IP traffic nor access to any web site like google.com.

What do I have to change to prevent this behavoir.

Any help highly welcomed.

Regards, Mario

2

It seems that there is a problem with the profile configuration here, the VPN tunnel connection is established through WireGuard, so the address there should be a tunnel IP (separate, for example 10.0.8.1), rather than the peer LAN IP, and it does not require to the "ListenPort".

This may be causing AXT1800 to route only 192.168.0.0/24, not all traffic.

This is the example from WireGuard server of the GL router, and export profile for client.

image
image645×271 11.7 KB

Refer guide:

4

This seems not to be the right setting. I am currently abroad in a hotel.
The wifi is without landing page, just a password. I can connect my mobile phone and it works perfectly. I can activate wireguard on my phone and get access to my home network and internet access.

Now comes the problem: If I use my AXT1800 as repeater, it connects to the wifi correctly. If I connect to the wifi of the AXT 1800 I can access my home network.
I also have to keep the IP address (192.168.0.206 because thats the setting at my Fritzbox and cannot be changed and I also need to set the ListenPort.)

However, I cannot open a single web site. So it looks to me that something with the DNS setting is not working. That is independend wether the VPN is running or not.

DNS Setting says

DNS from Repeater : 8.8.8.8 and 8.8.4.4.

DNS from wireguard 192.168.0.1

So what do I have to change?
Do I need to provide further log details or tests I can do?

Regards, Mario

5

Remove the DNS line from your WireGuard client config.

6

I will give it a try.

Just one remark: If the setting forec vpn tunnel is active, web is not working even if vpn is not turned on.

regards, Mario