Internet via DSL Modem
^
|
OpenWrt router
^
| 192.168.1.0/24
| -- LAN1 devices
|
|
Mikrotik router with wireguard server --> LTE Modem
^
| 192.168.2.0/24
|
LAN2 Devices
So LAN1 gets internet from DSL and LAN2 gets internet from LTE.
The problem is that I cannot even access MT router web admin page or LTE modem web admin page using wireguard server let alone OpenWrt or LAN1 devices.
Here is MT router config:
No clue as to your network, both from the config and that thing, no idea.
Dont see anyone getting public IPs, nothing makes sense including sourcenats.
You have ISP1 - private IP via upstream router
You have ISP2 - a private IP IP from LTE modem.
What you are doing is port forwarding the Wireguard listening port from the openWRT router to 192.168.1.193 the mikrotik.
The WG server is on the MT.
The MT local LAN is 10.0.0.0/24
The MT wg server address is 192.168.5.1/24
you wish to be able to access MT from a Road Warrior device ( laptop, smartphone ) to config the MT or to reach devices on ether3 or reach the LTE webpage.
+++++++++++++++++++++++++++++
Do you even even get a good handshake? The input chain rule on MT for listening port counter goes up by one??
ISP1 (DSL modem) is in bridge mode. So OpenWrt connects directly to internet.
You have ISP2 - a private IP IP from LTE modem.
Yes that’s correct.
What you are doing is port forwarding the Wireguard listening port from the openWRT router to 192.168.1.193 the mikrotik.
The WG server is on the MT.
I have 2 wg servers. One is on MT and one is on Openwrt. With public ips from ISP2 and ISP1, respectively.
On MT, I forwarded wg listetning port from LTE router to MT.
There is no forwarding port on OpenWrt because it is connected to internet directly (DSL modem is on bridge mode)
The MT local LAN is 10.0.0.0/24
The MT wg server address is 192.168.5.1/24
Yes. Plus:
OpenWrt local LAN is 192.168.1.0/24
The OpenWrt wg server address is 192.168.9.1/24
you wish to be able to access MT from a Road Warrior device ( laptop, smartphone ) to config the MT or to reach devices on ether3 or reach the LTE webpage.
I wish to be able to access MT and OpenWrt from the wg server on MT to config the MT or OpenWrt or to reach any device on OpenWrt or MT and also reach the LTE webpage.
Ok I set sourcenat rules as what you said. just a question, I need that all of connected devices to MT get internet just from LTE router. Is is consistent with the mentioned sourcenats?
When a device connected to wg server on OpenWrt wants to connect MT router or one of devices connected to MT router, I need this route so the MT router will know it should send response packet to OpenWrt.
When a device connected to openvpn server on OpenWrt wants to connect MT router or one of devices connected to MT router, I need this route so the MT router will know it should send response packet to OpenWrt.
All traffic goes out openwrt/dsl unless down and then traffic goes out LTE2.
Unless you can port forward the l listening port from the LTE modem/router to the MT, the MT cannot be a wireguard server.
I would put firweall rules in play at least for the wireguard so you can confirm handshake etc… and to allow on certain parties to config routers
Unless you can port forward the l listening port from the LTE modem/router to the MT, the MT cannot be a wireguard server.
Sorry I didn’t understand that. Actually right now port 6060 is forwarded to MT and MT has a running wireguard server on port 6060. I didn’t catch what you mean.
However, I have some problems with handshaking. handshake occurs but the speed is very low.
By I know, all LTE connections are NATed by ISP internally, so, you can’t control that. You can “open” ports on Mikortik, but your ISP will block these connections for obviously security reasons by I know.
You need a completely bridged public IP directly on your MK interface without any NAT working to run Wiregards VPN’s.
If I’m wrong, sorry for that and I will test it on my LtAP with 2 LTE connections.
