Wireguard VPN via Wifi

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi all.
I apologize for my English, I use a translator to create a message.
Please tell me what is wrong in the configuration?
I configured the router and added wg connections, as well as vlan for 1 of the ports, but when connecting to wi-fi there is no internet.
Although there are handshakes from wg, perhaps I'm doing something wrong?
Here's my config files below:

root@OpenWrt:/etc/config# cat network**

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd32:543a:9d0a::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0.1'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.0.251'
	option netmask '255.255.255.0'
	option ip6assign '60'
	option gateway '192.168.0.1'
	list dns '192.168.0.1'

config device
	option name 'eth0.2'
	option macaddr 'b0:be:76:e0:b6:57'

config switch
	option name 'switch0'
	option reset '1'
	option enable_vlan '1'

config switch_vlan
	option device 'switch0'
	option vlan '1'
	option ports '6t 2 3 4'

config switch_vlan
	option device 'switch0'
	option vlan '2'
	option ports '6t 0'

config interface 'wg0'
	option proto 'wireguard'
	option private_key '111'
	list addresses '10.0.0.2/32'
	option mtu '1420'
	list dns '1.1.1.1'
	list dns '1.0.0.1'

config device
	option type 'bridge'
	option name 'br-vpn'
	option bridge_empty '1'
	option mtu '1500'

config interface 'VPN'
	option proto 'static'
	option device 'br-vpn'
	option ipaddr '192.168.2.1'
	option netmask '255.255.255.0'

config device
	option type 'bridge'
	option name 'br-vpn'
	list ports 'eth0.3'

config switch_vlan
	option device 'switch0'
	option ports '6t 1'
	option vlan '3'

config wireguard_wg0
	option description 'tv.conf'
	option public_key '222'
        option private_key '333'
	list allowed_ips '0.0.0.0/0'
	list allowed_ips '::/0'
	option endpoint_host '444'
	option endpoint_port '555'
	option persistent_keepalive '25'
	option route_allowed_ips '1'

**root@OpenWrt:/etc/config# cat dhcp**
config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config dhcp 'VPN'
	option interface 'VPN'
	option start '100'
	option limit '150'
	option leasetime '12h'

**root@OpenWrt:/etc/config# cat wireless**

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/10300000.wmac'
	option channel '1'
	option band '2g'
	option htmode 'HT20'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid '111'
	option encryption 'psk2'
	option key '111'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'pci0000:00/0000:00:00.0/0000:01:00.0'
	option cell_density '0'
	option htmode 'VHT80'
	option band '5g'
	option channel 'auto'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'VPN'
	option mode 'ap'
	option ssid 'Wireguard5G'
	option encryption 'psk2'
	option key '111'

**root@OpenWrt:/etc/config# cat firewall**

config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	option masq '1'
	list network 'lan'

config zone
	option name 'vpn'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'VPN'
        list network 'VLAN3'

config rule
	option name 'VPN_DHCP'
	option src 'vpn'
	option target 'ACCEPT'
	list proto 'udp'
	option dest_port '67-68'

config rule
	option name 'VPN_DNS'
	option src 'vpn'
	option target 'ACCEPT'
	option dest_port '53'

config rule
	option name 'Block_VPN_from_Lan'
	list proto 'all'
	option src 'vpn'
	option dest 'lan'
	list dest_ip '192.168.0.1/24'
	option target 'REJECT'

config zone
	option name 'wg_client'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'
	list network 'wg0'

config forwarding
	option src 'vpn'
	option dest 'wg_client'
2

Try removing this and after that reboot and test again

3

Unfortunately, it didn’t help, but I’ll try to look at it again.

4

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.