Use of OpenWrt as Wireguard tunnel only

Installing and Using OpenWrt
1

Hello,

I would like to know if it's possible to use/configure OpenWrt as a Wireguard tunnel only. The idea is for OpenWrt configuration to only have two interfaces: one for the physical NIC and one for the Wireguard configuration. The physical interface would have DHCP server disabled as I would like to continue using my current router. The ultimate goal is to take a specific device on my network and set its static IP, mask, and for the gateway IP specify OpenWrt, not my ISP router. The reason I want this is to take advantage of OpenWrt Policy routing. I would like some traffic to be routed through Wireguard and the rest to bypass Wireguard.

What I have attempted so far (before even getting to Wireguard config):

  1. I deleted br-lan interface
  2. I changed firewall zone for wan interface to accept input (since it's sitting behind my ISP router, I figured this would be safe)

ISP router - 192.168.1.254
OpenWrt wan - 192.168.1.200 (it got it via DHCP)
Laptop - 192.168.1.100, gateway set to 192.168.1.200

With this configuration in place, the laptop can get to the internet no problem but if I take my Amazon firestick and also statically assign an unused IP and set the gateway to 192.168.1.200, it says it has no internet and I can't get to YouTube ..etc

Any thoughts on what I am trying to do, I suspect there is a better way of doing it.

Thank you so much

2

are there devices connected to your openwrt device, that shouldn't be routed through the WG tunnel ?

3

Let me make sure I answer your question correctly. If I point my laptop's gateway to OpenWrt, I would like to access certain websites using the Wireguard tunnel and the rest to be routed to my ISP router and the Internet. This is essentially a split tunnel based on the address defined in PBR.

4

thanks, but that wasn't what I asked :slight_smile:

5

ok, let me try again :slight_smile: . Right now OpenWrt is running as a VM with a single NIC connected in bridged mode. If it were a physical device, it would have a single NIC connected to my ISP's router.

6

any thoughts?