openvpn and ax88u and gl axt1800

[onthego41]

I have an GL-iNet axt1800 running openvpn client connected to my asus ax88u home router with an ip address of 10.241.142.x. The doc says that the asus should route that to my normal network
I see traffic passing in the VPN Dashboard. My mac is getting 192.168.8.190 from the axt. When I go to whatsmyip I see the external IP address for the asus router. So this makes me think all is fine.

My axt1800 is handing out 192.168.8.x to local machines
My asus ax88u is 10.241.141.x
My openvpn hosted in asus is 10.241.142.x

What I can’d do from my mac 192.168.8.190 is get to a server on 10.241.141.105

Not sure if this is an axt1800 question or an ax88u question.
Any thoughts??

 

[Tech9]

Why two routers, different subnets, one runs VPN client, another VPN server, etc...??

Draw a diagram, explain what is this setup needed for. Both routers have VPN client and server with selective routing available.

 

[onthego41]

This is the point of the GL-iNet axt1800 travel router. You can take it to a hotel, join it to the wifi, all your family devices are already connected to it, and everyone is on the internet with 1 hotel connection. Inside is a VPN client you can use to connect to your home network and access your NAS to stream videos while on the road.

GL-iNet axt1800 >> CLOUD >> Home asus ax88u. All the subnets are default and where I am running into issues assuming they need to be synced or overlap some how.

 

[ColinTaylor]

... where I am running into issues assuming they need to be synced or overlap some how.

All the subnets must be different and not overlap (assuming you're using a tun VPN connection).

I can't follow your Asus IP addresses (you said they are all default).

My asus ax88u is 10.241.141.x
My openvpn hosted in asus is 10.241.142.x

What is 10.241.141.x? That's a private IP address and therefore not accessible from the internet. Is it your WAN address? Is it your LAN address?

What I can’d do from my mac 192.168.8.190 is get to a server on 10.241.141.105

If 10.241.141.0/24 is your LAN subnet and 10.241.142.0/24 is the VPN server subnet then you need to make sure that any firewall on server 10.241.141.105 is configured to allow access from 10.241.142.0/24.

 

[Tech9]

GL-iNet axt1800 >> CLOUD >> Home asus ax88u

Got it. This is easy with some details. Home router runs VPN server, travel router runs VPN client. You need public WAN IP for your home router with DDNS service. The hotel may use captive portal making your travel router connection more difficult. Some hotels also filter known VPN ports. For this reason I have a server running on 443/TCP.

 

[onthego41]

We have public IPs for both locations, and DDNS setup since the public IPs can change.
I can't figure out the magic wireguard config to make this happen

Asus likes to make the wireguard server 10.6.0.1 and the client 10.6.0.2/32
Somewhere in there I need to modify allowedIPs but have not figured out where.

This would be Scenario 4 that is not listed on the help doc https://www.asus.com/support/faq/1048281/.
Also having problems finding where to turn off NAT over vpn.

(really feels like I am over complicating something that should be simple)

 

[ColinTaylor]

We have public IPs for both locations, and DDNS setup since the public IPs can change.
I can't figure out the magic wireguard config to make this happen

Asus likes to make the wireguard server 10.6.0.1 and the client 10.6.0.2/32
Somewhere in there I need to modify allowedIPs but have not figured out where.

This would be Scenario 4 that is not listed on the help doc https://www.asus.com/support/faq/1048281/.
Also having problems finding where to turn off NAT over vpn.

(really feels like I am over complicating something that should be simple)

View attachment 61035

Probably best to start a new thread as this has nothing to do with this thread.