Just want to make sure I understand correctly. You want to connect to your home network through Wireguard, then you want that traffic to not use the OpenVPN tunnel but exit through your WAN( this is your ISP,or the internet). You then want LAN Guest traffic to only use the OpenVPN tunnel and the rest of the LAN traffic to exit through the WAN.
The openVPN client is changing the ip address for the Wireguard Sever causing it to become unreachable. I think it can be done with just firewall rules. If you have a static IP from you ISP Port forwarding should work otherwise you will need to use GL.iNet DDNS or another.
Check this thread:
OK DDNS should work with proper VPN Policy setting (only allow VPN for certain IPs)
But in case of the issue with the OpenVPN Client and a simultaneous Wireguard connection you should reconsider your “design” because in this case your device will not suit my requirements/ use case.
As this is something which is in direct regards to the GL.Inet UI you might think about changing this restriction because it is useless and reduces the functional range of the device…
to be honest, I bought the BRU…
Johnex on 7-24-2020
I solved it.... here is what I learned and then the working config. First, I will (and have been) referring to my home based VPN endpoint as the 'server'. The iPhone and travel router are, in this case, 'clients'. I am putting the 'server' and...
Yes, I agree. However, as I'm using it to connect two fixed locations I've not really messed around with it too much after I got it working. [quote="takimata, post:4, topic:4215"]Can I bother you to compare your configuration against mine? Did you...
I do not work for and I am not directly associated with GL.iNet
1 Like
Thank you very much for the detailed answer.
You have fully understood my network environment and what I would like to achieve.
I have noticed this error in Wireguard (Wireguard on the client tries to connect to the IP of the OpenVPN server)
To solve this I am using a DDNS ( duckdns ) and the address to which the client tries to connect is already correct, following the format “WANIP:51820” however it still does not work (when I activate OpenVPN)
I may have to add some additional configuration.
It’s hard for me to understand what’s wrong. I’ve been checking this all afternoon and I don’t see what’s wrong.
Thank you very much for any help!
It may take a little bit for the DDNS to up date. GL.iNet says as long as 10 min and re update every 10 mins that could be it.
No, my public ip hasn’t changed all day, the DDNS is OK
alzhao
October 19, 2022, 3:02am
6
This is a bug. Fixed in firmware 4.1.0 release 2.
Thank you for the answer, that’s the version I’m using.
alzhao
October 19, 2022, 8:21am
8
Please refer to this thread.
Finally, you can use VPN Client and Server at the same time on one GL.iNet router.
You need to have Firmware 4.1.1 .
We call this VPN Cascading.
This hasn’t worked for me.
Notes:)
-I have OpenVPN enabled as a client
What am I missing?
Do I have to open/redirect ports? (This does it automatically, true?)
Mobile Client Configuration:
Other configuration of the slate ax:
VPN Policy based en VLAN ( VPN only for Guest WIFI )
I have enabled an encrypted DNS over TLS (CloudFlare)
I have protection against DNS attacks enabled.
Maclone (router) = Random
Is there anything that can conflict?
:S
Edit-1: I have seen a difference in VPN cascading tutorial:
Is it necessary to have the OpenVPN server enabled for my configuration to work?
Edit-2: I have started the Open-VPN server and everything remains the same, WireGuard does not work.
Edit-3: By the way, with the Wireguard configuration shown above in the screenshots if I deactivate the OpenVPN CLIENT the connection is made correctly from my mobile (outside the LAN)
Edit-4: I have noticed that the configuration generated by the Wireguard server (the QR code) is different if I have the OpenVPN client turned on or off.
So if I generate the configuration with the OpenVPN client turned off and then decide to turn it on, the Wireguard server does NOT work.
If I generate the configuration with the OpenVPN client turned on, it doesn’t work either.
I just wanted to point this out.
alzhao
October 20, 2022, 10:49am
11
There is nothing need to be done. It should just works.
I don’t know any reason that will cause this problem.
So, what is the problem now? When you connect, there is no Internet?
When I connect there is no internet, 0 clients appear in the control panel of the router, it does not make the handshake.
I have reset the router and set everything up again by following these steps:
1: Add OpenVPN client
Router logs:
Mobile client logs ( From the first start until I stop it )
2022-10-21 19:16:13.131121: [APP] App version: 1.0.15 (26)
I need to make this work, I need this function to work.
What’s happening?
It looks like it needs more time and is timing out at 2022-10-21 19:17:12.295670
It seems everything gets started but is arriving out of order
217.138.218.XXX is the IP of OpenVPN client:
check:
my WAN ip is different: 5.205.236.XX
I am not familiar with “Cascading”
So I don’t see your WAN IP of 5.205.236.xx anywhere in the log and it looks like it is trying to exit by the openVPN client.
Check the firewall Zones is the only thing I can think of?
alzhao
October 22, 2022, 4:18am
16
can you confirm one thing,
If you disconnect OpenVPN client on the router, you can connect to your Wireguard server?
I met a case that this happens but still don’t know why because it does not happen in my side. I need to look further.
Thank you for your interest and the desire to help!
If I deactivate the OpenVPN client, it does NOT work for me. But if I deactivate the OpenVPN client and generate a new configuration in WireGuard then it does work.
( I have kept the VPN Cascading “enable” in the test, I have not changed its settings )
Yes, I also thought that the problems came from here.
But in theory there is no need to add any rules, I understand that the router does all the work in the background when activating Wireguard Server:
In LuCi under firewall there is Zones that I think need to change that have not.
Yes, maybe I also think the problem comes from there.
I’m thinking that the problem may have to do with DDNS:
I have activated the OpenVPN client, and the ip of the image is that of the OpenVPN client server:
My WAN IP is different.
I do not work for and I am not directly associated with GL.iNet 
