Wireguard - under the covers

Wireguard - under the covers

Wireguard - under the covers
Wireguard - under the covers
2024-10-30 13:57:26 - last edited 2024-11-01 01:13:01
Model: ER605 (TL-R605) Ā 
Hardware Version: V2
Firmware Version: 2.2.6 Build 20240718 Rel.82712

I'm trying to understand how the SDN (OC200 Firmware Version = v2.16.3 Build 20240620 Rel.81038 and SDN v5.14.26.23) configures Wireguard.

 

I am interested to see if Masquerading is turned 'on' or 'off' and if it is possible to switch this setting?

 

I am assuming MSS Clamping is 'off' and that possibly there is a 'hidden' firewall zone for wireguard that dictates input, output and forward settings.

 

Regards,

 

Mike

 

 

Ā  0 Ā  Ā  Ā 
Ā  0 Ā  Ā  Ā 
#1
Options
1 Accepted Solution
Re:Wireguard - under the covers-Solution
2024-10-31 10:42:25 - last edited 2024-11-01 01:13:01

  @Clive_A Hi Clive,

 

I've now set my Wireguard Peer allowed IP's to:

 

0.0.0.0/1

128.0.0.0/1

::/1

8000::/1

 

Many thanks for your guidance.

 

Mike

Recommended Solution
Ā  1 Ā 
Ā  1 Ā 
#3
Options
3 Reply
Re:Wireguard - under the covers
2024-10-31 01:58:55 - last edited 2024-10-31 01:59:28

Hi @mortimm 

Thanks for posting in our business forum.

It depends on how you configure your routing in peer settings.

Masking Your IP Address: Setting Up a Full Tunnel VPN Connection (PPTP/L2TP/OpenVPN/WireGuard)

 

We encourage you to search and use the label and tag to find out the existing guides we have.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ā˜›Download Beta Hereā˜š ā˜› ā˜… Configuration Guide ā˜… ā˜š ā˜› ā˜… Knowledge Base ā˜… ā˜š ā˜› ā˜… Troubleshooting ā˜… ā˜š ā— Be kind and nice. ā— Stay on the topic. ā— Post details. ā— Search first. ā— Please don't take it for granted. ā— No email confidentiality should be violated. ā— S/N, MAC, and your true public IP should be mosaiced.
Ā  3 Ā 
Ā  3 Ā 
#2
Options
Re:Wireguard - under the covers-Solution
2024-10-31 10:42:25 - last edited 2024-11-01 01:13:01

  @Clive_A Hi Clive,

 

I've now set my Wireguard Peer allowed IP's to:

 

0.0.0.0/1

128.0.0.0/1

::/1

8000::/1

 

Many thanks for your guidance.

 

Mike

Recommended Solution
Ā  1 Ā 
Ā  1 Ā 
#3
Options
Re:Wireguard - under the covers
2024-11-01 01:14:15

Hi @mortimm 

Thanks for posting in our business forum.

mortimm wrote

  @Clive_A Hi Clive,

 

I've now set my Wireguard Peer allowed IP's to:

 

0.0.0.0/1

128.0.0.0/1

::/1

8000::/1

 

Many thanks for your guidance.

 

Mike

As we don't support v6 yet, setting v6 addresses here does not hurt a thing. But if you run into trouble when you access IPv6, remove them.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ā˜›Download Beta Hereā˜š ā˜› ā˜… Configuration Guide ā˜… ā˜š ā˜› ā˜… Knowledge Base ā˜… ā˜š ā˜› ā˜… Troubleshooting ā˜… ā˜š ā— Be kind and nice. ā— Stay on the topic. ā— Post details. ā— Search first. ā— Please don't take it for granted. ā— No email confidentiality should be violated. ā— S/N, MAC, and your true public IP should be mosaiced.
Ā  1 Ā 
Ā  1 Ā 
#4
Options