WireGuard client with IPv6 enabled

[ali232]

Hello,
I'm using Cloudflare Warp as a WireGuard client on my AX86U with Cloudflare IPv4 ranges in the allowed IPs, so I only tunnel Cloudflare ranges through Warp.
It works well, but after I enabled IPv6 on my router and added IPv6 ranges to the allowed IP list, it not works.
What could be causing this? I have an IPv6 address in my WireGuard client config as well.

 

[ZebMcKayhan]

Hello,
I'm using Cloudflare Warp as a WireGuard client on my AX86U with Cloudflare IPv4 ranges in the allowed IPs, so I only tunnel Cloudflare ranges through Warp.
It works well, but after I enabled IPv6 on my router and added IPv6 ranges to the allowed IP list, it not works.
What could be causing this? I have an IPv6 address in my WireGuard client config as well.

Wireguard is vpn-director only and vpn-director is not setup for ipv6.

You could setup the rules yourself via ssh if you want but beware that the policy route table is not as updated as ipv4 but for specific internet destinations ip it should work fine.

 

[ali232]

Thanks.
Can you please give me an example of how to do it? I’d like to tunnel these ranges through WireGuard.

 

[ZebMcKayhan]

Thanks.
Can you please give me an example of how to do it? I’d like to tunnel these ranges through WireGuard.

Well, I just tested this on my router and it works:

ip -6 rule add from all to 2600:: table wgc1 prio 11210

Repeat for each ip/range and increase prio number by 1.

To list your rules:

ip -6 rule

To delete a rule:

ip -6 rule del prio 11210

They will not be persistent across reboots unless you add them when wireguard starts, so in /jffs/scripts/wgclient-start
And delete them when/if it stops in /jffs/scripts/wgclient-stop
https://github.com/RMerl/asuswrt-merlin.ng/wiki/User-scripts#wgclient-stop-and-wgclient-start