NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
PR460X WireGuard VLAN access
Is there a way to be able to point a WireGuard VPN connection to one of my VPNs? I'm able to configure the Wireguard VPN, and get a client (my iPhone) to connect, but it's only setting up an address...
Below is example of my WireGurad configurations:
1. I have VLANs
VLAN1 default management: 192.168.1.0/24
VLAN2 IoT: 192.168.2.0/24
VLAN3 Guest: 192.168.3.0/24
2. WireGuard basic settings:
Server address: mywireguardserver.hopto.org
IP Address Range for VPN clients: 192.168.4.0/24
3. Add wireguard clients:
192.168.4.2
192.168.4.3
4. Once connected, VPN client 192.168.4.2 and 192.168.4.3 will have access to all below VLANs: 192.168.1.0, 192.168.2.0, 192.168.3.0
c3po2 thanks for input. I adjusted close to your configuration and now I can ping addresses on different VLANs, however, it only works while connected to WiFi on my home network. If I flip over to 5G on my cell phone, I can no longer ping devices.
Any ideas why?
On the earlier response, I do have my server set to to my external IP (via a DDNS service).
A few questions:
1. Is PR460X directly connected to your ISP modem, or behind another home router/gateway? If PR460X is behind another router, please port forward wireguard service to PR460X on upper router.
2. When your phone connects to Wi-Fi, which subnet it joins? Onto PR460X WAN subnet, or PR460X LAN subnet?
3. When your phone connects to 5G only, can you visit nslookup.io and lookup your ddns domain name?
- It’s directly connected to a modem.
When connected over 5G the interface address is 192.168.3.2. The peer subnnet is my management vlan 192.168.2.0/24.
Yes I can lookup my WAN ip via ddns on nslookupCould you please double check if PR460X WAN IP is public IP? Some Modem have bridge mode and NAT mode that it hands private IP to PR460X in NAT mode. Thanks.
I am also wondering how your were access different VLANs when the phone was connected to WiFi, specifically, what is WiFi subnet, how it is related to PR460X VLANs (i.e. Wi-Fi subnet is on or below LAN? or on WAN side?) Did you enable PR460X inter VLAN routing?(By default, this should be disabled, I am trying to figure out if you accessed different VLAN though VPN client or inter VLAN routing)
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
