Wireguard CLIENT not working through my Xiaomi AX6S with OpenWrt

Installing and Using OpenWrt
1

Hi

I have a distant Wireguard server that's working fine (connected to an Orange router), I can connect to it fine with my Windows Wireguard client on my laptop through my smartphone WIFI Hotspot.

Then I can connect fine to the distant Orange router in Firefox with 192.168.1.1 on the distant LAN

But the same laptop/client is not working correctly when it's connected to my Openwrt router (AX6S with 22.03RC1). I had the exact same issue with my previous Openwrt router (Linksys EA6350 v3 with 21.02).

I switch Wireguard client on, everything in the log is fine, but now I can't connect to the distant Orange router in Firefox with 192.168.1.1 on the distant LAN, (or any other computers on the LAN).

My ISP is using VLAN100 for WAN connection so I setup my router with that.

Is there any setting I need to change to make a wireguard client work through my router ? (firewall, DHCP?)

Wireguard client logs seems exactly the same:

with my smartphone Wifi Hotspot:
2022-05-05 10:37:39.490116: [TUN] [zenbook] Starting WireGuard/0.5.3 (Windows 10.0.19044; amd64)
2022-05-05 10:37:39.490116: [TUN] [zenbook] Watching network interfaces
2022-05-05 10:37:39.491673: [TUN] [zenbook] Resolving DNS names
2022-05-05 10:37:39.556091: [TUN] [zenbook] Creating network adapter
2022-05-05 10:37:39.685178: [TUN] [zenbook] Using existing driver 0.10
2022-05-05 10:37:39.694793: [TUN] [zenbook] Creating adapter
2022-05-05 10:37:39.900565: [TUN] [zenbook] Using WireGuardNT/0.10
2022-05-05 10:37:39.900581: [TUN] [zenbook] Enabling firewall rules
2022-05-05 10:37:39.848087: [TUN] [zenbook] Interface created
2022-05-05 10:37:39.905778: [TUN] [zenbook] Dropping privileges
2022-05-05 10:37:39.906294: [TUN] [zenbook] Setting interface configuration
2022-05-05 10:37:39.906810: [TUN] [zenbook] Peer 1 created
2022-05-05 10:37:39.911228: [TUN] [zenbook] Monitoring MTU of default v4 routes
2022-05-05 10:37:39.910717: [TUN] [zenbook] Interface up
2022-05-05 10:37:39.924322: [TUN] [zenbook] Setting device v4 addresses
2022-05-05 10:37:39.937908: [TUN] [zenbook] Monitoring MTU of default v6 routes
2022-05-05 10:37:39.937908: [TUN] [zenbook] Setting device v6 addresses
2022-05-05 10:37:39.938424: [TUN] [zenbook] Sending handshake initiation to peer 1 (xx.xx.xx.xx:51820)
2022-05-05 10:37:39.958835: [TUN] [zenbook] Startup complete
2022-05-05 10:37:39.989601: [TUN] [zenbook] Receiving handshake response from peer 1 (xx.xx.xx.xx:51820)
2022-05-05 10:37:39.989601: [TUN] [zenbook] Keypair 1 created for peer 1

with my Openwrt router:
2022-05-05 10:31:06.515186: [TUN] [zenbook] Starting WireGuard/0.5.3 (Windows 10.0.19044; amd64)
2022-05-05 10:31:06.515186: [TUN] [zenbook] Watching network interfaces
2022-05-05 10:31:06.517292: [TUN] [zenbook] Resolving DNS names
2022-05-05 10:31:06.545683: [TUN] [zenbook] Creating network adapter
2022-05-05 10:31:06.664683: [TUN] [zenbook] Using existing driver 0.10
2022-05-05 10:31:06.679277: [TUN] [zenbook] Creating adapter
2022-05-05 10:31:06.899369: [TUN] [zenbook] Using WireGuardNT/0.10
2022-05-05 10:31:06.899369: [TUN] [zenbook] Enabling firewall rules
2022-05-05 10:31:06.840452: [TUN] [zenbook] Interface created
2022-05-05 10:31:06.919186: [TUN] [zenbook] Dropping privileges
2022-05-05 10:31:06.919707: [TUN] [zenbook] Setting interface configuration
2022-05-05 10:31:06.920225: [TUN] [zenbook] Peer 1 created
2022-05-05 10:31:06.923312: [TUN] [zenbook] Monitoring MTU of default v4 routes
2022-05-05 10:31:06.923312: [TUN] [zenbook] Interface up
2022-05-05 10:31:06.934081: [TUN] [zenbook] Setting device v4 addresses
2022-05-05 10:31:06.935554: [TUN] [zenbook] Monitoring MTU of default v6 routes
2022-05-05 10:31:06.936060: [TUN] [zenbook] Setting device v6 addresses
2022-05-05 10:31:06.936060: [TUN] [zenbook] Sending handshake initiation to peer 1 (xx.xx.xx.xx:51820)
2022-05-05 10:31:06.950138: [TUN] [zenbook] Startup complete
2022-05-05 10:31:06.965853: [TUN] [zenbook] Receiving handshake response from peer 1 (xx.xx.xx.xx:51820)
2022-05-05 10:31:06.965853: [TUN] [zenbook] Keypair 1 created for peer 1
2

Some update:

I can connect (with putty) to distant wireguard server with his adress 10.6.0.1. It's a rpi with raspberrypios.

So problem is I can't reach other computers on the distant LAN, I can't connect to 192.168.1.x adresses.

I don't understand why, using the exact same laptop client connected to smartphone wifi hopspot is working, but connected to openwrt router is not.

3
  • Do you have 192.168.1.0/24 on multiple networks?
    • If so, this needs to be corrected by renumbering them all to be unique
  • Ensure you are using different private keys for each node
1 Like
4

Thank you so much!
Indeed I had 192.168.1.0/24 on both LAN.
I changed LAN on my openwrt router to 192.168.2.0/24 and now I can acces other computers on distant LAN.
Thanks again

1 Like
5

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.