Wireguard breaks portal

[krazeh]

@SiliconWolf

Meaning @ krazeh is correct and its my config causing me to lose access

What exactly are you trying to set up wireguard-wise? We can probably point you in the correct direction.

[SiliconWolf]

I would very much like to access my home network from anywhere using vpn.

[egc]

See: https://openwrt.org/docs/guide-user/services/vpn/wireguard/server

Note WireGuard is a routed solution so all subnets involved should be different.
So the server/router side, WG subnet and client side should be different.

That is where you went wrong, you were using the routers subnet as WG subnet.

[SiliconWolf]

I see, that's good to know!
I tried that site before but find it unclear, might be my skill issue.

But if i redo my setup and use other subnet, i should be in the clear from being locked out?

Also is it better to put up a traffic rule, or set up a new firewall zone for the interface?

[egc]

@SiliconWolf

But if i redo my setup and use other subnet, i should be in the clear from being locked out?

Hope so

@SiliconWolf

Also is it better to put up a traffic rule, or set up a new firewall zone for the interface?

The easiest is to just add the WG interface to the LAN firewall zone

But of course you also need a traffic rule to allow the UDP port to get access do not use a source port as clients often (can) use a random port

@SiliconWolf

config rule
        option name 'WireguardVPN'
        list proto 'udp'
        option src 'wan'
        option src_port '51869'     <<<< remove this
        option dest_port '51869'
        option target 'ACCEPT'
        option family 'ipv4'

[SiliconWolf]

What about safer way?

Btw except this forum, what are good places to find guides or info?

[egc]

@SiliconWolf

What about safer way?

Start with the easy way and get it working, make a backup and then work from that.

You can make a separate zone if needed if you do not want LAN access, but as said start easy

[egc]

@SiliconWolf

Btw except this forum, what are good places to find guides or info?

The OpenWRT wikis are quite good , but I can understand it is not always easy for beginners who also want some background information etc.

and of course people at this forum are very knowledgable and helpful.