Wireguard Access Client lan without using Gateway GL-SFT1200

Technical Support for Routers
1

Hello Forum,

i have a 2 GL-SFT1200 (Wireguard Server / Wireguard Client). It works perfectly so far. I can connect to a plc or pc, if the gateway is set to the Wireguard Client IP Address. So now i have a situation, where the Gateway is used for different communication stuff, and i need a solution, there i can access the Wireguard client network without that gateway is configured.

I think i need something like IP routing, but the examples i found do not fit, to this router. For Example i found a solution to configure a wg0.conf file, that does not exists.

Also i found this (Search google for wireguard-how-to-access-a-peers-local-network)

PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o wlan0 -j MASQUERADE

But not sure in which file, it should go.

I am almost there, but i do not find final step.

Thank you for your help.

2

Ok good news for now.
I used following iptables commands in ssh and it worked

iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o br-lan -j MASQUERADE

So only missing part is, there to put it so after reboot nothing is lost.

3

You can configure these parameters in the firewall of luci that the configuration is not lost even if the device restarts.

image
image1455×876 46.3 KB

4

Thank you. This worked!!!