Selfhosted

62120 readers

353 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Locked out of GL.iNet admin panel after WireGuard route change (reddthat.com)

submitted 8 months ago* (last edited 8 months ago) by tatoko556@reddthat.com to c/selfhosted@lemmy.world

10 comments fedilink hide all child comments

Hi everyone, I’m looking for help with a WireGuard routing issue on my GL.iNet router.

https://docs.gl-inet.com/router/en/4/tutorials/wireguard_server_access_to_client_lan_side/#how-to-access-wireguard-client-lan-side-from-server

I set the Target Address to 192.168.8.0/24.
I set the Gateway to 10.1.0.1.
After applying this, devices can still connect to the GL.iNet Wi-Fi, but there is no internet access.
The router’s admin panel at http://192.168.8.1/ is no longer accessible.

Has anyone experienced this before, or can explain what went wrong and how to recover access without a full reset?

Thanks in advance for any help.

you are viewing a single comment's thread
view the rest of the comments

[–] tatoko556@reddthat.com 3 points 8 months ago (1 children)

Thank you, a short reset worked!

But how do I set up the routing correctly on the WireGuard router? What should the Target Address and Gateway be if my LAN is under 192.168.8.0/24, and my mobile client with the WireGuard client has a client IP of 10.0.0.2/24?

[–] tychosmoose@lemmy.world 1 points 8 months ago (1 children)

So you have a single mobile device connecting via wg, correct? Not a second network?

If so the only configuration you should need on the router are firewall rules to allow forwarding from wg to lan. I am guessing that's what the second step in the GL-iNet help accomplishes. That's what I would recommend trying.

If I was doing this on "normal" OpenWRT I would create a firewall zone wg, and allow traffic to/from it and lan.

On the client device you should be good to go without changes if AllowedIPs is set to 0.0.0.0/, ::/0 (sending all traffic through wg).

[–] tatoko556@reddthat.com 1 points 8 months ago

thanks a lot