Understanding the 'Route Allowed IPs' option in Wireguard

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi all,

I recently moved from using Wireguard on my raspi to using OpenWRT as my Wireguard server, and I noticed there's an option on the peers labeled 'Route Allowed IPs'

Is there any explanation for what this does? I'm a bit confused, since, if my Wireguard network is 192.168.100.0/24, why would I need a new route for a specific peer like 192.168.100.3? Isn't there's already an entry in the routing table for 192.168.100.0/24 to the Wireguard interface?

Thanks for any help with this.

1 Like
3

If you've already assigned the wireguard interface a subnet and all your peers are individual devices with addresses inside that subnet then 'route allowed IPs' does very little. It's use comes when the end devices aren't in the assigned subnet and/or you're doing a site to site VPN.

1 Like
4

Ah, OK - got it.

So Wireguard in OpenWRT doesn't add routes to peers by default (like Wireguard's wg-quick tool does).

But if I wanted to, let's say, route everything through the tunnel, I'd want to check that box to automatically add in the new route.

5

Yep, pretty much that.

6

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.