<div dir="ltr"><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:medium;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial;min-height:100%"><div class="gmail-nH" style="width:994px"><div class="gmail-nH" style=""><div class="gmail-nH gmail-bkL"><div class="gmail-no" style="float:left"><div class="gmail-nH gmail-bkK gmail-nn" style="min-height:1px;float:left;width:792px"><div class="gmail-nH"><div class="gmail-nH"><div class="gmail-nH gmail-ar4 gmail-z"><div class="gmail-aeI"><div class="gmail-AO" style=""><div id="gmail-:4" class="gmail-Tm gmail-aeJ gmail-bt0" style="padding-right:4px;background:rgb(255,255,255);overflow-y:scroll;height:524px"><div id="gmail-:2" class="gmail-aeF" style="padding:0px;vertical-align:bottom;min-height:334px"><div class="gmail-nH"><div class="gmail-nH"><div class="gmail-nH gmail-g"><table class="gmail-Bs gmail-nH gmail-iY gmail-bAt" cellpadding="0" style="padding:0px;border-collapse:collapse;width:772px"><tbody><tr><td class="gmail-Bu gmail-bAn" style="font-family:arial,sans-serif;margin:0px;vertical-align:top;padding:0px;background:rgb(255,255,255)"><div class="gmail-nH gmail-if" style="margin:0px 8px 0px 0px"><div class="gmail-nH gmail-aHU" style=""><div class="gmail-nH gmail-hx" style="background-color:transparent;color:rgb(34,34,34);min-width:502px;padding:4px 0px"><div class="gmail-nH"><div class="gmail-h7 gmail-ie gmail-nH gmail-oy8Mbf" tabindex="-1" style="clear:both;padding-bottom:0px;max-width:100000px;outline:none"><div class="gmail-Bk" style="margin-bottom:0px;border-width:0px;border-top-style:solid;border-right-style:initial;border-bottom-style:initial;border-left-style:initial;border-top-color:rgb(239,239,239);border-right-color:initial;border-left-color:initial;border-bottom-color:initial;border-radius:0px;width:764px;float:none"><div class="gmail-G3 gmail-G2" style="padding-top:0px;background-color:transparent;border-width:1px 0px 0px;border-right-style:initial;border-bottom-style:initial;border-left-style:initial;border-right-color:initial;border-bottom-color:rgb(216,216,216);border-left-color:initial;border-top-style:solid;border-top-color:rgb(216,216,216);border-radius:0px;margin-bottom:0px;margin-left:0px;margin-right:0px"><div><div id="gmail-:2i"><div class="gmail-adn gmail-ads" style="border-left:1px solid transparent;padding-bottom:20px;padding-left:4px"><div class="gmail-gs" style="margin-left:30px"><div id="gmail-:2f" class="gmail-ii gmail-gt" style="font-size:12.8px;direction:ltr;margin:5px 15px 0px 0px;padding-bottom:5px"><div id="gmail-:2g" class="gmail-a3s gmail-aXjCH" style="overflow:hidden"><div dir="ltr"><div><br class="gmail-Apple-interchange-newline">Hi,</div><div><br></div><div>I set up WireGuard on two Ras Pi's, one acting as a vpn server and the other as a portable access point. The server uses only its eth0 interface. The access point uses one wifi interface for the public side, and another wifi plus eth0 for clients. The iptables are similar to<span> </span><a href="http://www.ckn.io/" target="_blank" style="color:rgb(17,85,204)">www.ckn.io</a>.  Packets leaving the wg0 interface on the access point are NATed.</div><div><br></div><div> I'd like to allow clients to access the server's local subnet as well as routing to the public net but do not see how to do it.  Packets sent to a local ip seem to get dropped at the server end of the tunnel because that is as far as a traceroute can go, and tcpdump does not show the packets arriving at the wg0 interface. Packets to public ip's work as expected. ProxyARP is enabled on the server but that does not seem to be the current issue. Could anyone suggest a way to do this?</div><div><br></div><div>Client wg-quick config:</div><div><br></div><div><div>[Interface]</div><div>Address =<span> </span><a href="http://10.200.200.3/32" target="_blank" style="color:rgb(17,85,204)">10.200.200.3/32</a></div><div>DNS = 10.200.200.1</div><div>PrivateKey = ...</div><div>MTU = 1500</div><div><br></div><div>[Peer]</div><div>PublicKey = ...</div><div>AllowedIPs =<span> </span><a href="http://0.0.0.0/0" target="_blank" style="color:rgb(17,85,204)">0.0.0.0/0</a></div><div>Endpoint =<span> </span><a href="http://10.0.0.23:51820/" target="_blank" style="color:rgb(17,85,204)">10.0.0.23:51820</a></div><div>PersistentKeepalive = 21</div></div><div><br></div><div>server wg-quick config:</div><div><br></div><div><div>[Interface]</div><div>Address =<span> </span><a href="http://10.200.200.1/32" target="_blank" style="color:rgb(17,85,204)">10.200.200.1/32</a></div><div>ListenPort = 51820</div><div>PrivateKey = ...</div><div>MTU = 1500</div><div><br></div><div>[Peer]</div><div>PublicKey = ...</div><div>AllowedIPs =<span> </span><a href="http://10.200.200.3/32" target="_blank" style="color:rgb(17,85,204)">10.200.200.3/32</a></div></div><div><br></div><div>sudo ip route show:</div><div><br></div><div><div>default via 10.0.0.1 dev eth0 src 10.0.0.23 metric 202 </div><div><a href="http://10.0.0.0/24" target="_blank" style="color:rgb(17,85,204)">10.0.0.0/24</a><span> </span>dev eth0 proto kernel scope link src 10.0.0.23 metric 202 </div><div>10.200.200.3 dev wg0 scope link </div></div><div class="gmail-yj6qo"></div><div class="gmail-adL"><br></div></div></div></div><div class="gmail-hi" style="border-bottom-left-radius:1px;border-bottom-right-radius:1px;padding:0px;width:auto;background:rgb(242,242,242);margin:0px"></div></div><div class="gmail-ajx" style="clear:both"></div></div><div class="gmail-gA gmail-gt gmail-acV" style="font-size:12.8px;padding:0px;width:auto;border-bottom-left-radius:0px;border-bottom-right-radius:0px;border-top:none;margin:0px;background:transparent"><div class="gmail-gB gmail-xu" style="border-top:0px;padding:0px"><div class="gmail-ip gmail-iq" style="clear:both;margin:0px 5px 0px 0px;padding:8px 0px 0px 4px;border-top:1px solid rgb(216,216,216)"><div id="gmail-:2e"><table class="gmail-cf gmail-wS" style="border-collapse:collapse"><tbody><tr><td class="gmail-amq" style="font-family:arial,sans-serif;margin:0px;padding:0px 8px 1px 1px;vertical-align:top;width:44px"><img id="gmail-:0_2" name=":0" src="https://plus.google.com/u/0/_/focus/photos/public/AIbEiAIAAABDCKTakv3R466XCSILdmNhcmRfcGhvdG8qKDJiNjFmYWE3YTAyNGJkMjE4ZGZhMDQ3MWVlNmMwYWM5ZDRkYmJlZjcwAZOgWxqa5P8ncaK12Pw3FB3h8TUC?sz=24" class="gmail-ajn gmail-bofPge" style="display: block; width: 24px; height: 24px;"></td><td class="gmail-amr" style="font-family:arial,sans-serif;margin:0px;padding:0px;width:722px"><div class="gmail-nr gmail-wR" style="background-color:rgb(255,255,255);color:rgb(34,34,34);padding:0px;box-sizing:border-box;border-radius:1px;border-width:1px;border-style:solid;border-color:rgb(192,192,192) rgb(217,217,217) rgb(217,217,217)"><div class="gmail-amn" style="color:rgb(153,153,153);height:64px;padding:8px 0px 0px 12px">Click here to<span> </span><span id="gmail-:1u" tabindex="0" class="gmail-ams gmail-bkH" style="text-decoration:underline">Reply</span><span> </span>or<span> </span><span id="gmail-:2j" tabindex="0" class="gmail-ams gmail-bkG" style="text-decoration:underline">Forward</span></div></div></td></tr></tbody></table></div></div></div></div></div></div></div></div></div></div><div class="gmail-nH"></div><div class="gmail-nH"></div></div></div><div class="gmail-nH"><div class="gmail-l2 gmail-ov" style="padding-bottom:440px;padding-top:20px;text-align:center"><div id="gmail-:5d"></div><div id="gmail-:3j" class="gmail-aeV" style="float:left;width:254.406px;text-align:left"><div><div class="gmail-md gmail-mj" style="font-size:11.2px;font-weight:bold;color:rgb(34,34,34);padding-top:0px"><div><span dir="ltr">64.86 GB</span><span> </span>(30%) of<span> </span><span dir="ltr">215 GB</span><span> </span>used</div><div class="gmail-aeW" style="font-weight:normal"><a target="_blank" href="https://www.google.com/settings/u/0/storage?hl=en" class="gmail-l8" style="color:rgb(34,34,34);text-decoration:underline">Manage</a></div></div></div></div><div class="gmail-aeU" style="float:left;width:254.406px"><div id="gmail-:3k"><div><div class="gmail-ma" style="font-size:11.2px;color:rgb(34,34,34);padding-top:0px"><a href="https://www.google.com/intl/en/policies/terms/" target="_blank" class="gmail-l9" style="color:rgb(34,34,34)">Terms</a><span> </span>-<span> </span><a href="https://www.google.com/intl/en/policies/privacy/" target="_blank" class="gmail-l9" style="color:rgb(34,34,34)">Privacy</a></div></div></div></div><div id="gmail-:5g" class="gmail-ae3" style="float:left;width:254.406px;text-align:right"><div><div class="gmail-l6" style="padding-top:12px;font-size:11.2px;color:rgb(34,34,34)"><div>Last account activity: 1 minute ago</div><span id="gmail-:2x" class="gmail-l8 gmail-ou" tabindex="0" style="color:rgb(34,34,34);text-decoration:underline">Details</span></div></div></div><div style="clear:both"></div></div></div></div></td><td class="gmail-Bu gmail-yM" style="font-family:arial,sans-serif;margin:0px;vertical-align:top;padding:0px;width:0px;background:rgb(255,255,255)"><div class="gmail-Bt" style="height:0px;overflow:hidden;width:0px"></div><div class="gmail-nH" style="width:0px"><div class="gmail-no" style="float:left"><div class="gmail-nH gmail-nn" style="min-height:1px;float:left;width:0px"><div style="height:64ex"></div></div></div><div class="gmail-dJ" style="height:0px;overflow:hidden;clear:both"></div></div></td><td class="gmail-Bu gmail-y3" style="font-family:arial,sans-serif;margin:0px;vertical-align:top;padding:0px;width:0px;height:100px;background:rgb(255,255,255)"><div class="gmail-Bt" style="height:0px;overflow:hidden;width:396px"></div><div class="gmail-nH gmail-bno gmail-adC" style="width:0px;margin:0px"><div class="gmail-nH"><div class="gmail-nH gmail-Pj"></div></div></div><div class="gmail-y4" style="height:1366px;width:0px;opacity:0"></div></td></tr></tbody></table></div></div></div></div></div></div></div></div></div></div></div><div class="gmail-nH gmail-bnl gmail-nn" style="min-height:1px;float:left;background:rgb(255,255,255);margin-top:43px;max-width:0px;min-width:0px;width:0px;height:524px"></div></div><div class="gmail-dJ" style="height:0px;overflow:hidden;clear:both"></div></div></div></div></div><div class="gmail-vY gmail-nq" style="width:994px;height:632px;color:rgb(0,0,0);font-family:arial,sans-serif;font-size:medium;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"></div><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:medium;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"></div><br></div>