Access to server's local network

Jim Brandt jimb245 at
Wed May 2 20:31:35 CEST 2018


I set up WireGuard on two Ras Pi's, one acting as a vpn server and the
other as a portable access point. The server uses only its eth0 interface.
The access point uses one wifi interface for the public side, and another
wifi plus eth0 for clients. The iptables are similar to
Packets leaving the wg0 interface on the access point are NATed.

 I'd like to allow clients to access the server's local subnet as well as
routing to the public net but do not see how to do it.  Packets sent to a
local ip seem to get dropped at the server end of the tunnel because that
is as far as a traceroute can go, and tcpdump does not show the packets
arriving at the wg0 interface. Packets to public ip's work as expected.
ProxyARP is enabled on the server but that does not seem to be the current
issue. Could anyone suggest a way to do this?

Client wg-quick config:

Address =
PrivateKey = ...
MTU = 1500

PublicKey = ...
AllowedIPs =
Endpoint =
PersistentKeepalive = 21

server wg-quick config:

Address =
ListenPort = 51820
PrivateKey = ...
MTU = 1500

PublicKey = ...
AllowedIPs =

sudo ip route show:

default via dev eth0 src metric 202 dev eth0 proto kernel scope link src metric 202 dev wg0 scope link

Click here to Reply or Forward
64.86 GB (30%) of 215 GB used
Manage <>
Terms <> - Privacy
Last account activity: 1 minute ago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the WireGuard mailing list