Any Ninjas out around?

help!

Explorer
Joined
Aug 3, 2023
Messages
57
I can’t ping my offsite server using servers but I can inside the WG app's CLI
Only the WG app shell can ping devices on the WG network. OS CANNOT
Here is both ends of the client im trying to connect via the server Server address as named in the working connection
SERVER WG ADRESS 10.0.0.1/24


HOME ROUTER 192.168.8.1
Home NAS 192.168.8.144

CLIENT1
[Interface]
Address = 10.0.0.4/24
PrivateKey = XXX
DNS = 64.6.64.6
MTU = 1420
[Peer]
AllowedIPs = 10.0.0.1/24, 10.0.0.5/32
Endpoint = OFFSITEIP:48574
PersistentKeepalive = 25
PublicKey = XXX

OFFSITE ROUTER FIRST AT INTERNET 192.168.0.1
ROUTER 2
192.168.0.34.
NAS ADRESS 192.168.0.206

CLIENT2
[Interface]
Address = 10.0.0.5/24
PrivateKey = XXX
DNS = 64.6.64.6
MTU = 1420
[Peer]
AllowedIPs = 10.0.0.1/24, 10.0.0.4/32
Endpoint = OFFSITEIP:48574
PersistentKeepalive = 25
PublicKey = XXX

THE SERVER IS A ROUTER, but on the other side there is a ISP ROUTER and on that there is a VPN router (my wireguard server)
And my traffic from home is tunneling out of my network and into offsite ISP router Via 48574 UDP port and then its forwarding to the VPN router successfully and vice versa.

Out of lan I can connect to both sides and they BOTH are part of wireguards network and
ARE ACTIVE MEMBERS OF THE WIREGUARD NETWORK CURRENTLY

But I cant send data :’( as Only wireguards App Within Truenas can ping the connected network
I even got tailscale working but it’s to slow and I copied the Routes from that and it didn’t work so here my config, hopefuly someone can point out something that im missing I would be very grateful
 

help!

Explorer
Joined
Aug 3, 2023
Messages
57
Topography
Screenshot 2024-02-19 at 00.22.03.png
 

chuck32

Guru
Joined
Jan 14, 2023
Messages
623
So you have wireguard on the truenas scale server running (how exactly is this deployed? app? Ubuntu VM?) and only from within the app shell you can ping the other truenas machine? What address do you ping? Any firewalls in place that could interfere?

In AllowedIPs = 10.0.0.1/24, 10.0.0.5/32 10.0.0.5/32 is already included in 10.0.0.1/24. While I wait for more details on your set-up, my ideas are that you either need to create a network bridge or that you probably need to include

AllowedIPs = 10.0.0.1/24,192.168.0.206/32

Try to describe more of your setup and also post the commands you used when pinging and the output. And please use code tags :)
 
Top