Wireguard Routing to LAN

G

G4

Hi all,

I have the following set up: lan1.box connects through my ISPs CGNAT to internet.box though Wireguard.
I can do bidirectional ping from internet.box to lan1.box on the Wireguard IPs and also on the lan1.box's 192.168.222 interface.

What doesn't work is accessing lan2.box from internet.box.
Capture.JPG

Here is wg0.conf for internet.box:

Code: 
[Interface]
Address = 10.11.11.1/24
ListenPort = 51820
PrivateKey = XXX=

#lan1.box
[Peer]
AllowedIPs = 10.11.11.5/32,192.168.1.0/24
PublicKey = XXX=

Here is wg0.conf for lan1.box:

Code: 
[Interface]
PrivateKey = XXX=
Address = 10.11.11.5/32

[Peer]
PublicKey = XXX=
Endpoint = internet.box:51820
AllowedIPs = 10.11.11.0/24
PersistentKeepalive = 25
lan1.box has no firewall and packet forwarding enabled.
It obviously has a route to lan2.box because they are in the same subnet but for some reason the packets don't get forwarded.

Does anyone have any insights?

Thanks!
 
The lan2.box host has to know where to route the traffic back, it probably just sends it to its default gateway.
 
Right so then i should probably set up NAT on lan1.box to route the packets through its 192.168.1.222 interface?
 
You must log in or register to reply here.
Back
Top