Hi to everybody, i need help about routing on GL-MT300N-V2.
I have Mango (IP 192.168.8.1) with IP cam wifi, this router are connected with Tp-link (LTE) (IP 192.168.0.1) with wan port. The provider LTE are in CGNAT so not reachable from Internet. I have a remote VPS where I have installed wireguard Server on Docker. I use Mango to connect with the server in VPN and it work and my CAM are reachable from Internet.
On my VPS with wireguard server I have routing the port 8008 to my Mango in port 80, and this work perfect.
PostUp = iptables -t nat -A PREROUTING -p tcp --dport 8008 -j DNAT --to-destination 192.168.8.1:80
I do the same thing to reach my Tp-link
PostUp = iptables -t nat -A PREROUTING -p tcp --dport 8010 -j DNAT --to-destination 192.168.0.1:80
the destination 192.168.0.0/24 is unreacable because are in double nat?
What I can do to bypass?
I think about wgclient need to routing to WAN, but I do not know how....
Seems to be a firewall issue, data arriving at 192.168.8.1 belongs to the firewall INPUT, but data arriving at 192.168.0.1 belongs to forwarding, please make sure you allow wireguard->WAN forwarding on the Mango router.
that is what i supposed, but I do not know how redirect wgclient to WAN.
I'll try to port forward on Mango, from wgclient port 80 to WAN 192.168.0.1 port 80 but don't work.
Can you explain me?
thank you
I did almost the same thing as you, but it was very smooth and I had easy access to my parent router.
wg server configure on vps
wg client configure on router
The only thing I did was set the following firewall rules on the router
you are right.
I can reach the router, but I see imperfect page, like the image attached.
analyzing the page i see the path of the "link" are ../CSS ecc...
So I think the page not load correct.
It looks like you've succeeded, but the page you're trying to visit isn't fully loaded because it relies on sites like www.w3.org. You can try tracing the path to www.w3.org
I think the problem may be here, you only do port forwarding for the 192.168.0.1 address, if your web page needs to reference other Intranet addresses or other ports, it will not work.
