Arch Linux

giannis_mathiou

Member

Registered: 2013-03-12

Posts: 1

WireGuard Server and clients

I have successfully setup a WireGuard server on VPS with arch linux.

I have 4 devices I want to connect through that VPN server.

This is my server configuration:

[Interface]
Address = 10.100.100.1/24
ListenPort = 51820
PrivateKey = <SERVER_PRIVATE_KEY>

PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o ens15 -j MASQUERADE; iptables -A FORWARD -o %i -j ACCEPT
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o ens15 -j MASQUERADE; iptables -D FORWARD -o %i -j ACCEPT

[Peer]
# haswell
PublicKey = <PUBLIC_KEY_OF_FIRST_CLIENT>
AllowedIPs = 10.100.100.2/32

[Peer]
# whyred
PublicKey = <PUBLIC_KEY_OF_SECOND_CLIENT>
AllowedIPs = 10.100.100.3/32

[Peer]
# dipper
PublicKey = <PUBLIC_KEY_OF_THIRD_CLIENT>
AllowedIPs = 10.100.100.4/32

[Peer]
# jankieMonkey
PublicKey = <PUBLIC_KEY_OF_FOURTH_CLIENT>
AllowedIPs = 10.100.100.5/32

The clients are:

FirstClient: ArchLinux machine which successfully connects to VPN and has internet access.
SecondClient: Android phone which successfully connects to VPN and has internet access.
ThirdClient: Android phone which successfully connects to VPN BUT has NO internet access.
FourtClient: Windows 10 laptop which successfully connects to VPN BUT has NO internet access.

Yesterday while I tried to connect the 4th client to my VPN by mistake I gave allowed IP same as the 3rd (10.100.100.4) device and tried to connect both at the same time to my VPN. From that time 3rd and 4th client doesn't have internet access although are connected to VPN network.
After that I created new tunneling configuration for both devices restarted my VPN server and tried to connect again, getting the same behavior where 1st and 2nd client have internet access but 3rd and 4th doesn't.

Could you point me to a direction to find why on some clients I have internet access and on others I don't.

Edit: Setting on both of the clients that were unable to reach internet MTU value and DNS by Google are able to reach internet now.

Last edited by giannis_mathiou (2020-03-22 14:30:02)

stingA0815

Member

From: Löffingen, Germany

Registered: 2016-04-21

Posts: 31

Re: WireGuard Server and clients

The client settings would be interesting, if they are the affected systems.

AllowedIPs = x.x.x.x/yy

Regards,
Harm

edit: The routing table might help as well.

Last edited by stingA0815 (2020-04-02 19:20:25)