WireGuard LAN access fails when router VPN client is active
from BonkTheAnnoyed@lemmy.blahaj.zone to selfhosted@lemmy.world on 28 Nov 15:47
https://lemmy.blahaj.zone/post/34992981

I run WireGuard on my router to hit my LAN services (SAMBA, home assistant, etc) from afar.

But when I enable the VPN client on my router, I can no longer access LAN services over Wireshark. “Allow LAN access is set to ‘true’” on the UI (Merlin).

Has anyone else run into this? Any ideas?

#selfhosted

threaded - newest

slazer2au@lemmy.world on 28 Nov 16:05 next collapse

I must be thinking of the wrong Wireshark because the one I know of is a packet capture program not a VPN client/server.

0x0@lemmy.zip on 28 Nov 16:11 next collapse

Maybe Wireguard?

BonkTheAnnoyed@lemmy.blahaj.zone on 28 Nov 16:22 collapse

Yep. Edited. Definitely autocorrect’s fault, not my morning brain fog.

BonkTheAnnoyed@lemmy.blahaj.zone on 28 Nov 16:21 collapse

No, actually you’re right. I meant wire guard.

slazer2au@lemmy.world on 28 Nov 16:43 collapse

All good mate.

DevoidWisdom@sh.itjust.works on 28 Nov 16:15 next collapse

Just to verify do you have acces to the router from remote client?

Are you routing all traffic from the remote device through your lan router, or using split tunnel?

Im not a network pro, but I am running a very similar setup to circumvent CG-NAT and access lan servers. Things that I ran into were making aure I had the correct “Allowed IPs” set on all clients, and proper “routes” setup on the router.

non_burglar@lemmy.world on 28 Nov 17:04 collapse

You are asking the WG server to listen to incoming requests from outside your lan subnet, so it is ignoring VPN requests from that subnet.

There are two solutions to this:

  1. Add routing to your wireguard server instance to allow the VPN intermediary subnet to accept connections from your lan subnet or
  2. Allow your wireguard client to split-tunnel, so it can reach subnets that aren’t reachable outside your WG tunnel.
BonkTheAnnoyed@lemmy.blahaj.zone on 28 Nov 17:56 collapse

Thank you, this is really helpful, a good place to start.