Hello, I am using a GL-x750v2 with original Firmware (which is OpenWRT)
cat /etc/openwrt_release
DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='19.07.8'
DISTRIB_REVISION='r11364-ef56c85848'
DISTRIB_DESCRIPTION='OpenWrt 19.07.8 r11364-ef56c85848'
DISTRIB_TAINTS='busybox'
I actually got LTE to work, but wireguard is not working. I cannot ping the WG-Server from this LTE router. I did not add any route, the wg interface shows “green status” and there is a tiny bit of traffic, but hardly any (Upload / Download22.12 KB / 632 B) in 1 min.
I still can NOT ping 192.168.33.1 (=wg server)
Here my setup:
and WG-Server at homeLAN
LAN IP = 192.168.1.94
WG-IP = 192.168.33.1
Client = LTE Router (GL-x750v2)
LAN IP = 192.168.66.1
WG-IP = 192.168.33.9
here the network: https://ibb.co/Z2S0W4s
on the home network all is set up, the only problem is the LTE Router
<<<< LTE Router CONFIG >>>>
Wireguard config:
Wireguard I set up at the GUI/Webinterface like this:
[Interface]
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
ListenPort = 51820
Address = 192.168.33.9/32
DNS = 8.8.8.8
[Peer]
PublicKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
AllowedIPs = 192.168.1.0/24, 192.168.33.0/24
Endpoint = wireguard.mydomain.com:51820
root@GL-X750:~# wg show
interface: wg0
public key: G8rN......................H71Qk1I=
private key: (hidden)
listening port: 51820
peer: xxR9......................kZuiTRI=
endpoint: 89.247.198.76:51820
allowed ips: 192.168.1.0/24
latest handshake: 1 minute, 10 seconds ago
transfer: 25.49 KiB received, 18.89 KiB sent
persistent keepalive: every 25 seconds
Trying to add the route:
root@GL-X750:~# ip -4 route
default via 10.64.64.64 dev 3g-modem_1_1_2 proto static metric 40
10.64.64.64 dev 3g-modem_1_1_2 proto kernel scope link src 10.144.27.47
89.247.198.76 via 10.64.64.64 dev 3g-modem_1_1_2
192.168.66.0/24 dev br-lan proto kernel scope link src 192.168.66.1
root@GL-X750:~# ip route add 192.168.1.0/24 via 192.168.33.1
Error: Nexthop has invalid gateway.
The routes you can see here:
root@GL-X750:~# ip route
default via 10.64.64.64 dev 3g-modem_1_1_2 proto static metric 40
10.64.64.64 dev 3g-modem_1_1_2 proto kernel scope link src 10.129.142.114
87.123.116.30 via 10.64.64.64 dev 3g-modem_1_1_2
192.168.1.0/24 dev wg0 scope link
192.168.66.0/24 dev br-lan proto kernel scope link src 192.168.66.1
Here config/network:
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config interface 'lan'
option type 'bridge'
option ifname 'eth1'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option hostname 'GL-X750-736'
option ipaddr '192.168.66.1'
I did not set up any routes myself, they have been set up automatically.
<<<< SERVER CONFIG >>>>
here the wireguard server ip routes:
wireguard-SERVER:~$ ip route
default via 192.168.1.1 dev eth0 proto dhcp src 192.168.1.94 metric 202
default via 192.168.1.1 dev wlan0 proto dhcp src 192.168.1.96 metric 303
169.254.0.0/16 dev vethee31619 scope link src 169.254.213.154 metric 208
169.254.0.0/16 dev veth5796082 scope link src 169.254.108.165 metric 210
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-4db4c8c735b6 proto kernel scope link src 172.18.0.1
192.168.1.0/24 dev eth0 proto dhcp scope link src 192.168.1.94 metric 202
192.168.1.0/24 dev wlan0 proto dhcp scope link src 192.168.1.96 metric 303
192.168.33.2 dev wg0 scope link
192.168.33.9 dev wg0 scope link
192.168.33.10 dev wg0 scope link
192.168.33.11 dev wg0 scope link
192.168.33.12 dev wg0 scope link
192.168.33.21 dev wg0 scope link
192.168.33.30 dev wg0 scope link
192.168.66.0/24 dev wg0 scope link
(side note: connecting with smartphone/notebook from anywhere using wg works just fine)
Another problem could be IPTABLES? Or not the cause since I cannot even ping the 192.168.33.1 (the wg-server)?
Firewall?
Did not change anything I know how this would be done in luci interface but their interface does not show firewall zones. could you tell me how i check using the cli?
these are the only options at the webinterface concerning the firewall: Firewall - GL.iNet Docs