Routing to a network behind a node

M. Dietrich mdt at
Sat Sep 8 11:06:33 CEST 2018


i have setup a wg vpn with several nodes, lets say in a
network one of the boxes (ip in
that network has an interface to a different network with
additional boxes, lets say i would like to
reach the boxes in that network directly so i established a
route on another node in the wg network ( like

	ip route add via

but once i ping i get the error

	From icmp_seq=1 Destination Host Unreachable
	ping: sendmsg: Required key not available

it seems the package reaches wireguard but wireguard doesnt
know the "via" and tells it has no key to route to
which is fine. but why doesn wg honour the via and send it to
the router

i think its more or less whats done if you route all your
traffic through wg so i assume i do a terrible stupid mistake
(i am no network or kernel routing expert which may be an
excuse), can someone help?

best regards,
M. Dietrich
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <>

More information about the WireGuard mailing list