# Wire guard client running on GL-iNet devices

**URL:** <https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771>\
**Category:** VPN, DNS, Leaks\
**Created:** [August 10, 2024, 1:28am UTC](https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771 "2024-08-10T01:28:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgd](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/e47774/32.png) [@mgd](https://forum.gl-inet.com/u/mgd)\
**Post date:** [August 10, 2024, 1:28am UTC](https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771/1 "2024-08-10T01:28:25Z")

</div>

When I set AllowedIPs to 10.0.0.0/24 on client the GL-MT3000, the WireGuard (WG) VPN is NOT allow unencrypted internet access (Internet is blocked). It does, however, allow encrypted tunnel access to the remote network’s local resources. Should it NOT allow unencrypted internet access as does other WG software clients i.e. WG OSX client version: 1.0.16 (27) , Windows 10/11 WG client and ubuntu WG client ?

When I have AllowedIPs is set to 0.0.0.0/0, ::/0 is working as expected with all traffic is encrypted to the WG server internet.

I test. the same configure file for the wire guard client  
current hardware:  
Devices: Beryl AX GL-MT3000 and GL-MT6000  
Firmware Version: 4.6.2 ,Firmware Type: release1  
Compile Time: 2024-06-28 08:56:13 (UTC+00:00)  
setup  
GL-MT6000 is acting as the WireGuard Server  
GL-MT3000 is acting as the WireGuard Client

client config file  
[Interface]  
PrivateKey = \< private key\>=  
Address = 10.10.1.2/24  
DNS = 1.1.1.1  
MTU = 1420  
[Peer]  
PublicKey = =  
AllowedIPs = 10.1.1.0/24  
Endpoint = \< public Internet IP iv4 \>:51820  
PersistentKeepalive = 25

should it not work like this with 10.1.1.0/24

 ![SCR-20240810-ecp](https://forum-static.gl-inet.com/original/3X/c/9/c9c02d753ab604799c005f94f6b09f13a5057bd7.png)

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [August 10, 2024, 5:31am UTC](https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771/2 "2024-08-10T05:31:07Z")

</div>

Did you enable „Block non VPN traffic“ by chance?

---

<div class="post-metadata">

**Author:** ![mgd](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/e47774/32.png) [@mgd](https://forum.gl-inet.com/u/mgd)\
**Post date:** [August 10, 2024, 10:36am UTC](https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771/3 "2024-08-10T10:36:11Z")

</div>

hi thanks for the reply. base on your feed back. I review your suggestion. I found need to do change the following two setting for have the wire guard client to work correctly with the AllowedIPs = 10.1.1.0/24 configure file and the other configure file with AllowedIPs =0.0.0.0/0, ::/0. The two changes were :

 ![SCR-20240810-slo](https://forum-static.gl-inet.com/original/3X/4/a/4ab4363113e70054eeb1b4e302b389979ab572fa.png)

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 11:40am UTC](https://forum.gl-inet.com/t/wire-guard-client-running-on-gl-inet-devices/45771/4 "2025-10-29T11:40:53Z")

</div>