VPN/Wireguard split routing?

grieger · 2019-11-29T15:26:22.689Z

Hi, I’m trying to set up Wireguard on a GL-AR750S (currently 3.100 for the fun of it) to route only one subnet to the Wireguard peer. So config looks like “AllowedIPs = 192.168.2.0/24, 10.0.1.0/24”. Connection works and tunnel is usable.

But whatever I do, bringing up the connection sets a default route to the WG interface. It’s pretty hardcoded in the wireguard init script (if this is actually used here).

Is there a way to just configure routes to the AllowedIPs through the tunnel and leave def route as is (like wg-quick is doing?)? I tried to use VPN Policies to allow only traffic for the AllowedIPs to the VPN but didn’t work for me, neither.

Best
Götz

robotluo · 2019-12-03T03:32:16.743Z

Hi,

You can try to modify the /etc/vpn.user