Arch Linux

blufinney

Member

Registered: 2014-08-26

Posts: 59

Replicate (defunct aur) networkmanager-wireguard-git [SOLVED]

Is there a way to replicate whatever networkmanager-wireguard-git did when it comes to routes (or something)?  When I successfully create a wireguard connection with nmcli using the exact same conf as I did with networkmanager-wireguard-git I'm unable to access anything on the peer network.  I can't ping, I can't access, nada.  I also noticed if I goto a site like wtfismyip.com I'm not coming from the peer network, I'm coming from my local one.  When using networkmanager-wireguard-git it must have done something extra that made it "just work" the way one would expect a VPN to work (YES I GET IT, WIREGUARD ISN'T A VPN - BUT HEY, NON NETWORK ADMINS USE IT THAT WAY, SO... =P ).

I've spent hours reading though route threads and documentation and I've realized I'd probably need to take a 6 month course to really understand linux routing tables.

I just want to connect to a wireguard peer and access devices on the peer network and access the internet via the peer network like I used to when networkmanager-wireguard-git existed.

FWIW, config:

[Interface]
Address = 10.1.0.4/32
DNS = 172.30.10.1
PrivateKey = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=

[Peer]
AllowedIPs = 0.0.0.0, ::/0
Endpoint = my.endpoint.com:8181
PersistentKeepalive = 25
PublicKey = YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY=

Output of wg:

# wg
interface: mywginterface
  public key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=
  private key: (hidden)
  listening port: 48285
  fwmark: 0xca6c

peer: YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY=
  endpoint: xx.xx.xx.xx:8181
  allowed ips: 0.0.0.0/32, ::/0
  latest handshake: 11 seconds ago
  transfer: 12.77 KiB received, 9.27 KiB sent
  persistent keepalive: every 25 seconds

Output of nmcli:

mywginterface: connected (externally) to mywginterface
        "mywginterface"
        wireguard, sw, mtu 1420
        inet4 10.1.0.4/32
        route4 0.0.0.0/32 metric 0
        route4 10.1.0.0/32 metric 0
        route6 default metric 1024

Any ideas?  Thanks in advance!  I know this is probably an easy one to those more initiated in the networking arts.

Last edited by blufinney (2022-04-21 04:59:30)

blufinney

Member

Registered: 2014-08-26

Posts: 59

Re: Replicate (defunct aur) networkmanager-wireguard-git [SOLVED]

I found the issue - NO ROUTES NEEDED!
On the other side (in this case an OpenWRT router, I had to add the IP Address of 10.1.0.1/32.  Without it I'm unable to access the router side lan and the internet available via the router.  Odd that networkmanager-wireguard-git AND wireguard mobile on android DID NOT require this - but it seems to be a more correct setup anyway.