This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.TP-Link router as Wireguard client to other brand than TP-Link
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Short question, is it possible to use a TP-Link router with Wireguard support to connect to a wireguard server other than a TP-Link?
I have a wireguard config generated by server but I can't find any way to configure this on TP-Link.
If someone could help me with this I would be happy. all I have is a config file from the server that generated it, this file works fine from the Windows client on my PC.
I have tried many different things without success. this is what i have to work with. here is a copy of a corresponding file.
[Interface]
PrivateKey = iHi0jt+X6GqD1mn9pIYMgEzqUdu9yJEBPFVCJd9tFlY=
Address = 10.11.168.5/32
DNS = 10.11.168.1
[Peer]
PublicKey = NFWtPL+Ih+aim9YoAarsydKIbkERMdVHDjZ2FdiXDjs=
AllowedIPs = 10.11.168.1/32,10.11.168.5/32,0.0.0.0/0
Endpoint = xxx.xxx.xxx.xxx:51821
This file is generated by a UXG-Pro from unifi, I have also tried to connect to the Wireguard server on a raspberry Pi without success.
UXG-Pro connects with no problem to TP-Link routers but TP-Link is unable to connect to Unifi or raspberry pi server as Client.
Anny tipps 
Hi @MR.S
Thanks for posting in our business forum.
MR.S wrote
I have tried many different things without success. this is what i have to work with. here is a copy of a corresponding file.
[Interface]
PrivateKey = iHi0jt+X6GqD1mn9pIYMgEzqUdu9yJEBPFVCJd9tFlY=
Address = 10.11.168.5/32
DNS = 10.11.168.1
[Peer]
PublicKey = NFWtPL+Ih+aim9YoAarsydKIbkERMdVHDjZ2FdiXDjs=
AllowedIPs = 10.11.168.1/32,10.11.168.5/32,0.0.0.0/0
Endpoint = xxx.xxx.xxx.xxx:51821
This file is generated by a UXG-Pro from unifi, I have also tried to connect to the Wireguard server on a raspberry Pi without success.
UXG-Pro connects with no problem to TP-Link routers but TP-Link is unable to connect to Unifi or raspberry pi server as Client.
Anny tipps
On the TP-Link routers, can you try to change the allowed IPs to 0.0.0.0./0 alone?
Quite strange. Have you tried to Wireshark and check if the ER even started the connection?
Hi @MR.S
Thanks for posting in our business forum.
MR.S wrote
I'm not particularly good at this here, but to me it looks like the problem is that I can't change the public key on TP-Link in the wireguard section to match my wireguard config.
But correct me if I'm wrong..
In WG, the public key cannot be changed. It is generated by the WG. If you don't want that key, generate a new one. The key will be static when it is generated.
I don't think it should be a problem with the public key. You should simply paste the key to the other peer settings and they should start the connection.
I finally succeeded in connecting a TP-Link router to a wireguard server. but it is not easy.
as I mentioned earlier, this would have been easier if I could change the Server Public Key on TP-Link. now I had to change the Server Publik Key on the Wireguard server to match the Public Key on the TP-Link router.
3 different places had to be changed on the wireguard server before I was able to connect the TP-Link router to the Wireguard server.
After the router connected I still didn't get any traffic until I entered 0.0.0.0/0 so that's what I'm struggling with now. I don't want all traffic via Wireguard just some networks.
As I see it, there are a number of missing fields in the configuration of TP-Link to be able to use the router as a Wireguard client.
here is an example from another brand that works without problems.
Do you have any tips? I have connetction to the wireguard server but I don't get any traffic in the tunnel until I enter 0.0.0.0/0 but I don't want to route all traffic through the tunnel only some networks, I have only tested on an ER706W so I don't know if it is the same on ER8411 or ER707-M2
All tips are gratefully received