Wireguard connected but no Internet

Routers
1

Hello,

I just setup a Wireguard server with Alta ROUTE10:

image
image348×380 16.7 KB

And I did the user. Added to the iPad/Windows PC but when I enable Im losing internet connection.

Why is this happening? I need to open any port?

Thanks

2

It shouldn’t be necessary to open a port, but at least one other thread has reported that adding a firewall rule to allow :51820 can help. Can you let me know if that helps?

I’m looking for the post where this was noted.

3

I had some initial issues reaching internet myself so I did some troubleshooting.

For a while I had specifically to add a Firewall rule and allow traffic from the VPN subnet to WAN. Don’t understand why, and I removed it and it continued to work. Maybe there has been some fixes behind the scenes?

Anyway:

  • Does the tunnel itself work?
  • Is it only the traffic out to the internet that is not working?
  • Is there an allowed IPs of 0.0.0.0/0 in the Wireguard client settings on the client device
  • Have you tried a reboot of the Route10?
4

I did a DMZ to ROUTE10 IP from my ISP router. Still doesn’t works.

  • Does the tunnel itself work? Connects but I cannot access any ip of the tunnel.
  • Allowed 0.0.0.0/0
  • I did a reboot
5

@imas I also have a question here to clarify. As you try and access the Route10 with WG enabled, are you trying to access it from another site that has a Route10 deployed? Or are you tethering from your phone? Access from a site that does not have a Route10?

6

@Alta-Chase Directly from an iPad Air, I have the ROUTE10 at home with a PoE switch, a WiFi AP, and an AV Video Controller.

I have the iPad in the office, and I can’t reach any devices on my Home.

I followed this tutorial:

I don’t know where I’m losing :grimacing:

7

Fixed, for some reason Wireguard ddns was pointing to ROUTE10 IP (idk why), I replaced Endpoint ip on wireguard .conf client file with my public IP address.

Why ddns is pointing to ROUTE10 local ip and not to public IP?

Thanks

8

@imas Any chance the Route10 was behind another router?

DDNS within the Route10 should always default to the WAN IP. If there was another router in front of it, that may be why it didn’t.

9

Yes, I have ISP router behind. What can I do to make ddns working having ISP router behind? Any idea?

10

The ISP router needs to be bridged, or configured for IP Passthrough. There may be other terms for the same end-result depending on your region and provider but the goal is to disable or bypass the router component of the modem. It may require speaking with the ISP for a new modem that isn’t a combined router unit.