Wireguard client (GL-B1300) can only connect to the internet and not to the other lan

golebole · 2022-02-06T16:11:06.698Z

I have a GL-B1300 with firmware 3.211 stable and want to use it as a travel router with a wireguard connection to my home network. There is an Opnsense firewall, which is already connected to several clients and works perfectly.

Setting up the GL-B1300 with the Wireguard client has worked, and it establishes a VPN (wireguard client) connection. The problem is that I cannot access my home network, internet works. The other Wireguard clients have no problem accessing the home network. But when I connect a device to the router and want to access the network via it, it doesn’t work.

Setup:

Client → GL-B1300 (VPN Client) → Internet → Opnsense (VPN Server) → Subnet (192.168.3.0, 192.168.7.0)

What could be the reason for this? All IPs are enabled with 0.0.0.0/0.

Best regards
Christian

alzhao · 2022-02-07T04:49:06.155Z

Why do you have two subnet after the Opensense?

What is the subnet that Opensense is on?

Not only need to allow all IPs but need to set up route I think.

golebole · 2022-02-07T17:47:52.894Z

I have overall 7 subnets, to separate for example my working computer from the private network, separate outside lan cams from the facility server, webserver, etc.

Opnsense is with wireguard 10.10.10.1 and the

So the topology is like this:
Client (192.168.10.137)→ GL-B1300 (192.168.10.1 (VPN Client → 10.10.10.5) → Internet → Opnsense (VPN Server 10.10.10.1 and internal the gateway for all subnets, so 192.168.1.1,192.168.2.1…) → Subnet (192.168.3.0, 192.168.7.0)

How has the static route look like? I need only to access to 192.168.3.3 npt back.

robotluo · 2022-02-08T02:48:35.163Z

You can try the following static routes first

ip route add 192.168.3.3 via 10.10.10.1 dev wg0