GT-AX6000 - 3004_388.6_0 - Wireguard client - No Access to Servers local LAN

[Drihha]

Hello,

I’ve an issue with my GT-AX6000 flashed with 3004_388.6_0, using wireguard client config.

The setup is as follows:
remote location:
GT AX6000, as wireguard client with default LAN: 192.168.50.X

Home location:
Ubiquiti Dream Machike SE, as wireguard server with default LAN: 192.168.1.X
In my home network there are several devices/servers running which I want to access through the GT-AX6000

The wg config is as follows:
„
[Interface]
PrivateKey = „XYZ“
Address = 192.168.5.3/32
DNS = 9.9.9.9,149.112.112.112

[Peer]
PublicKey = „XYZ“
AllowedIPs = 192.168.5.1/32,192.168.5.3/32,0.0.0.0/0
Endpoint = myDDNsProvider:1025
„

The config works on every other device without any issue, unfortunately not with the asus router.
I can access the Internet through the tunnel but none of the devices hanging under my ubiquiti dream machine. It seems that it‘s an issue with the router, since the config worked even on a crapy Fritzbox from AVM without any issue.

Can someone help me please? I just want to be able to access my local network through the asus router.

Everything works fine with OpenVPN, but not with wg.

The VPN Director Rule is as follows:
Interface (WG), local IP: 192.168.50.55

Btw: I noticed that the VPNFusion is gone. Did Asus remove it?

Many thanks in advance.


Regards.

 

[Drihha]

@ZebMcKayhan
Could you help eventually?

 

[ZebMcKayhan]

The config works on every other device without any issue, unfortunately not with the asus router.

Your rule in vpndirector says only that ip 192.168.50.55 should access wg. That would not imply the router.

First order of business would be to remove your current vpn director rule.
A lan2lan rule would be destination based, like:
LocalIP: blank
RemoteIP: 192.168.1.0/24
Iface: wgc1 (or whatever you use)

this would make all clients (including router) to access other lan.

Don't use dns entry if you don't need it. Leave it blank in gui.

 

[Drihha]

Tks, you really made my day.

Btw: Did they remove VPN Fusion? I just can see the classic „VPN Client“, „VPN Director“ tabs

 

[ZebMcKayhan]

VPN Fusion?

VPN Fusion is Asus stock variant. In Merlin FW it have always been VPN Director (as far as I know) which is superior.
The rule you just put in for lan2lan is not possible on stock asus and vpnfusion for example.

 

[Drihha]

Even on stock firmware they removed it.