WireGuard connected but not routing traffic

[meruserasus]

Hi,

I'm having issues where WireGuard connects (takes 15 seconds to get status / connects), but it does not route traffic through it. And if I turn off OpenVPN, then it says "connected" but there is no internet at all.

Just to clarify, I m using two clients, OpenVPN and WireGuard (testing), and no internet when I turn off OpenVPN

Allowed IPs are set to 0.0.0.0/0,::/0 for WireGuard client setting,
ENABLE NAT: Yes
Inbound firewall: Block
Killswitch: Yes (if I turn it off, then internet works but not through VPN)

Using identical rules as OpenVPN and that one works fine.

RT-AX86U Pro
Firmware:3006.102.5


VPN Director settings:

Do I need not to use KillSwitch on Wireguard perhaps?

The only errors are from OpenVPN, every few seconds

Oct 12 09:23:00 ovpn-client2[10334]: AEAD Decrypt error: bad packet ID (may be a replay): [ #6833625 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

 

[ZebMcKayhan]

Hi,

I'm having issues where WireGuard connects (takes 15 seconds to get status / connects), but it does not route traffic through it. And if I turn off OpenVPN, then it says "connected" but there is no internet at all.

Just to clarify, I m using two clients, OpenVPN and WireGuard (testing), and no internet when I turn off OpenVPN

Allowed IPs are set to 0.0.0.0/0,::/0 for WireGuard client setting,
ENABLE NAT: Yes
Inbound firewall: Block
Killswitch: Yes (if I turn it off, then internet works but not through VPN)

Using identical rules as OpenVPN and that one works fine.

RT-AX86U Pro
Firmware:3006.102.5


VPN Director settings:

View attachment 68289

View attachment 68291

Do I need not to use KillSwitch on Wireguard perhaps?

The only errors are from OpenVPN, every few seconds

Oct 12 09:23:00 ovpn-client2[10334]: AEAD Decrypt error: bad packet ID (may be a replay): [ #6833625 ] -- see the man page entry for --no-replay and --replay-window for more info or silence this warning with --mute-replay-warnings

For Wireguard you need to put in rules in vpndirector for which Local IP (lan ip) that should use the Wireguard interface.
You could put in a single ip, like LocalIP=192.168.50.120 or you could put your entire lan there like LocalIP=192.168.50.0/24.
Assuming you are using subnet 192.168.50.x for your lan.
Keep RemoteIP blank unless you want to control which internet ip that you should contact using Wireguard interface.

Adjust to your needs.