Virtual Gateway / redirect traffic to VPN

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi there

I'm fighting with my OpenWRT to setup additional gateways on the same lan but have no more ideas how to go forward.

Short story: at my home place I have an TV Box. So to be able to watch content from other countries, I've installed two VMs with Debian and PureVPN as VPN client.
So whenever I want to change the country, I go in TV Box into Network settings and change the default gateway from 192.168.2.1 to 192.168.2.2 for Poland or 192.168.2.3 for Germany (see attached drawing).
So far everything works as expected.

Now I have another TV Box connected to OpenWRT router (192.168.8.0/24 Network). This router has an Wireguard client connected to my home network. All my gateways are 192.168.2.1, 192.168.2.2 and 192.168.2.3 reachable (ping, ssh), so the connectivity is not an issue.

The problem is, I would like to be able to change the countries on the other TV Box same way as on the main TV Box by changing the GW. because I'm in network 192.168.8.0/24 - I can't use 192.168.2.x as gateway.

I need to setup virtual GW on OpenWRT with IP 192.168.8.2 and 192.168.8.3 and route all traffic from these IP's to 192.168.2.x (GW 192.168.8.2 -> 192.168.2.2, 192.168.8.3 -> 192.168.2.3).

Any advice how to setup virtual GW and forward the traffic to another GW behind Wireguard VPN?

Thanks for any hint!

VPN_Setup.drawio-2
VPN_Setup.drawio-2751×666 45.1 KB

2

Is 'Main Router' an OpenWrt device?

I ask because you may need to use policy based routing (PBR) on that device. Normally routing is based on destination only. PBR allows you to route based on other things such as source IP. There are a lot of posts on PBR. This one on routing by source may help.

I've never done this so others may offer better suggestions. Probably a simpler way to do it.

You could try this:
Create two WireGuard tunnels, one for PL, and one for DE. Run PBR on OpenWRT Router and on 'Main Router'.
Change Mobile TVBox to 192.168.8.102 then OpenWRT Router uses PBR to route it over PL tunnel. It hits main router w/ PL wireguard tunnel IP and 'Main Router' uses PBR to route it to PL Docker.
Do the same for DE.
Change Mobile TVBox to 192.168.8.103 then OpenWRT Router uses PBR to route it over DE tunnel. It hits main router w/ DE wireguard tunnel IP and 'Main Router' uses PBR to route it to DE Docker.

If 'Main Router' is flexible enough (like OpenWrt) could probably get rid of the Dockers and just configure two PureVPN tunnels on the 'Main Router'