Wireguard client doesn't work

[meliodas]

Hi, I'm trying to create a new Wireguard client in the router GUI that connects to my remote VPS VPN server. Before doing so, I tested the vpn config file on another machine and it works. I then stop the vpn on the machine and continue to setup the Wireguard client in the router GUI. So far so good.

Now in a terminal, I ssh into my router, and do ifconfig wgc1 and I can see the interface is up and the IP address of the peer. However when I ping the remote peer IP I get no reply. Similarly, on the remote VPS, when I ping the client peer IP I get no response as well. I thought it was straight-forward but clearly not or I'm missing something ?

Please help. Thanks.

 

[ZebMcKayhan]

Hi, I'm trying to create a new Wireguard client in the router GUI that connects to my remote VPS VPN server. Before doing so, I tested the vpn config file on another machine and it works. I then stop the vpn on the machine and continue to setup the Wireguard client in the router GUI. So far so good.

Now in a terminal, I ssh into my router, and do ifconfig wgc1 and I can see the interface is up and the IP address of the peer. However when I ping the remote peer IP I get no reply. Similarly, on the remote VPS, when I ping the client peer IP I get no response as well. I thought it was straight-forward but clearly not or I'm missing something ?

Please help. Thanks.

Merlin fw requires policy rules for Wireguard clients.

Use vpn director to setup rules for which local/lan ips that should use the tunnel and/or wich remote/destination ips the tunnel should be used for.

 

[bennor]

Hi, I'm trying to create a new Wireguard client in the router GUI that connects to my remote VPS VPN server. Before doing so, I tested the vpn config file on another machine and it works. I then stop the vpn on the machine and continue to setup the Wireguard client in the router GUI. So far so good.

Now in a terminal, I ssh into my router, and do ifconfig wgc1 and I can see the interface is up and the IP address of the peer. However when I ping the remote peer IP I get no reply. Similarly, on the remote VPS, when I ping the client peer IP I get no response as well. I thought it was straight-forward but clearly not or I'm missing something ?

Please help. Thanks.

What router, what firmware?
If using a VPN client on the router have you setup a policy rule on the VPN director page for the VPN client?

 

[meliodas]

Merlin fw requires policy rules for Wireguard clients.

Use vpn director to setup rules for which local/lan ips that should use the tunnel and/or wich remote/destination ips the tunnel should be used for.

Ah okay. I'll take a look thanks.

 

[meliodas]

What router, what firmware?
If using a VPN client on the router have you setup a policy rule on the VPN director page for the VPN client?

AsusWRT AX56U w/ Merlin firmware 3004.388.8_2