Questions around setting up a VPN server

Routers
1

So.. still trying to get this stuff working. I’ll be honest and say I’m a bit frustrated to say the least as I was hoping for a more user friendly experience but it seems that is just kind of missing frankly from key parts of the system. I wrote a whole long thing about it but figured it would be best to just break this into pieces.

I followed this guide https://help.alta.inc/hc/en-us/articles/32440809238171-Configuring-WireGuard-Remote-User-VPN-on-Route10

I setup a VPN..

  1. First thing that happened was I attempted to change the port to something more “acceptable” to any other networks I might be on since 51820 I doubt will be allowed in a lot of areas. I found if I changed this port and regenerated the config the port does not get unblocked in the firewall. Is there a reason why setting it up saving the settings and turning it on doesn’t auto create this rule?(I assume it’s a missing rule but frankly I don’t even see 51820 in the firewall either so I am unsure where it even gets it from?
  2. Just doing the defaults to try and tests other things there is no access to the lan or internet through the VPN. There are no GUI options to enable this access and I see no way to code this in the GUI. Am I missing something or am I expected to know command line and all the commands associated with mapping the interconnects between subnets and such? The gateway’s ping.. just no access.
  3. If 2 is “Yes you are expected to know all that”.. Is there any plans to make this more easy? My previous routers except for PFsense this was just a simple drop down box of lan and lan&internet and maybe vlanIDs you want it to have access to or something. The guide just ends with setting up the server/client. If the answer is no then how exactly do you go about it?
  4. Where can I see usage of said VPN clients? I see someone in feature requests asked for a dashboard so I guess my assumption is there is no way to see it in the GUI?

Also just throwing it out there that I do have a public accessible IP and I was running a wireguard and openVPN client on my old asus AX-GXE16000 router(running asus merlin but also stock was simple as well) that I’m trying to move away from. I never really had a problem with it either. On that router at least for the wireguard section it was just a few clicks and done. OpenVPN was slightly more complicated if you wanted better security.

2

So to answer 2 and 3

If you change the subnet of the server you have to remember to change the IP of the users and if you don’t it won’t work. So make sure to chose a subnet before setting up any users in the AUTH and don’t go changing it. I still have not figured out how to change the port properly for the server itself.

Should also mention alta support helped me figure this out as the IP for the user is behind a show/hide for wireguard and in my clicking through everything I didn’t think to look at that.

3

To answer question 1. It’s a bug and will be fixed soon and 4. apparently wait for the dashboard.