Site-to-Site wireguard VPN Server side cannot access to devices in client side

[ronzino]

I have a WireGuard site-to-site VPN.
I would like that devices located in VPN-server side could access to devices located in VPN-client side, while device from VPN-client side connects to internet using the tunnel.

The part "VPN-client side connect to internet using the tunnel" is working fine.

the configuration is the following

SERVER SIDE
Router asus wrt merlin running wireguard server
Router ip 192.168.119.1
WireGuard server ip 10.6.0.1
Intranet option enabled
Allowed IPs(Server) 10.6.0.120/32,192.168.120.0/24
Allowed IPs (client) 0.0.0.0/0
Static route
Host 192.168.120.0
mask 255.255.255.0
gateway 10.6.0.1
interface LAN

CLIENT SIDE
Router with OPENWRT
Router ip 192.168.120.119
WireGuard client ip 10.6.0.120

Configuration pictures of client side follow

I wonder if I have to define a forwarding vpnWG=>lan
And I am also not that sure that Server side static route gateway should be something different

 

[octopus]

I have a WireGuard site-to-site VPN.
I would like that devices located in VPN-server side could access to devices located in VPN-client side, while device from VPN-client side connects to internet using the tunnel.

The part "VPN-client side connect to internet using the tunnel" is working fine.

the configuration is the following

SERVER SIDE
Router asus wrt merlin running wireguard server
Router ip 192.168.119.1
WireGuard server ip 10.6.0.1
Intranet option enabled
Allowed IPs(Server) 10.6.0.120/32,192.168.120.0/24
Allowed IPs (client) 0.0.0.0/0
Static route
Host 192.168.120.0
mask 255.255.255.0
gateway 10.6.0.1
interface LAN

CLIENT SIDE
Router with OPENWRT
Router ip 192.168.120.119
WireGuard client ip 10.6.0.120

Configuration pictures of client side follow
View attachment 64494














View attachment 64495

View attachment 64496

View attachment 64497

I wonder if I have to define a forwarding vpnWG=>lan
And I am also not that sure that Server side static route gateway should be something different

You have to aske in openwrt forums, this is not supported here.

 

[ronzino]

Well missconfiguration could be also from asus wrt merlin side. I have an hybrid configuration .

Does your reply imply that my server side configuration is correct ?