Wireguard, allowed-ips, ipv6 and multicast

nicolas prochazka prochazka.nicolas at gmail.com
Tue May 19 11:09:24 CEST 2020

I'm trying to use vxlan encapsulated into Wireguard tunnel, with a
multicast group for announcement.
Ex :
ip -6 link add vxlan100 type vxlan id 100 dstport 4789  local
`wg0Ip6_lock`  group ff05::100 dev wg0 ttl 5

All works very well when i set wg tunnel with ::/0  as allowed-ips,
but if i'm trying to be more restrictive, as ff05::/32  for example,
it does not work.
Is a specific interaction between allowed-ips and multicast group in ipv6 ?

Nicolas Prochazka.

More information about the WireGuard mailing list