"Subnet Routing" with Wireguard and CasaOS | IceWhale | Page 1

azure patrol Dec 18, 2024, 1:12 PM

#

Hi everyone 👋. I've almost setup my wireguard perfectly but am missing 1 feature. I want to know how to access other devices kn my network.

Can anyone help me with my Wireguard problem. I've got it setup and it is working so I can access everything on my CasaOS (Jellyfin, Immich and Files) But I am wondering if it is possible while using WG-Easy if I can setup a "Subnet Route" so that I can turn on my Gaming PC with WOL and access it with Moonlight/Sunshine. And maybe even my orinter but OC is definatley the priority. Is this possible and if so what is it called / is there a guide?

Any help will be greatly appreciated.

hardy rose Dec 18, 2024, 1:17 PM

#

With wireguard you tell in the configuration file which subnets you should be able to access via the tunnel.
This is called split-tunnel

#

its usually listed like: AllowedIPs = 0.0.0.0/0 <- means no split-tunnel and route all traffic through.
AllowedIPs = 192.168.0.0/24 <- means that only traffic destined for 192.168.0.XXX/24 is routed via the wireguard tunnel

azure patrol Dec 18, 2024, 1:20 PM

#

Would I change my allowed ips in Wg0.conf?

slate bloomBOT Dec 18, 2024, 1:20 PM

#

GG @azure patrol, you just advanced to level 1!

hardy rose Dec 18, 2024, 1:21 PM

#

on the client side, it would potentially be wg0.conf

azure patrol Dec 18, 2024, 1:22 PM

#

Okay so I should use a split tunnel to access my casa server and devices on my network???

hardy rose Dec 18, 2024, 1:23 PM

#

#

this config allows this particular client access to 192.168.122.0/24

#

Yes, you should only route the traffic you want routed via the tunnel

azure patrol Dec 18, 2024, 1:30 PM

#

What file was this in for you?

hardy rose Dec 18, 2024, 1:31 PM

#

this would be the client side, Linux it would be /etc/wireguard/wg0.conf

azure patrol Dec 18, 2024, 1:32 PM

#

Okay thank you... I have one more question. CasaOS overwrites any changes I make in that file. Should I change it on the Linux side? And not via the CasaOS webui

hardy rose Dec 18, 2024, 1:33 PM

#

Are your goal here to have the CasaOS server to be the VPN endpoint (server) or as a Client?

azure patrol Dec 18, 2024, 1:34 PM

#

Endpoint so I have WG setup on CasaOS, and have connected my device through the QR codes

hardy rose Dec 18, 2024, 1:37 PM

#

Using the WG-Easy Application?

azure patrol Dec 18, 2024, 1:37 PM

#

Yeah the one that is on the CasaOS appstore

hardy rose Dec 18, 2024, 1:38 PM

#

Grand, so your device will then when you go via the QR Code, you will have to amend the client config for the allowedips

azure patrol Dec 18, 2024, 1:38 PM

#

This ^

azure patrol Dec 18, 2024, 1:40 PM

#

hardy rose Grand, so your device will then when you go via the QR Code, you will have to am...

Like this?

hardy rose Dec 18, 2024, 1:47 PM

#

you need to remove 0.0.0.0/0

#

and ::0/0

azure patrol Dec 18, 2024, 1:55 PM

#

I did that and it still isn't working do I need to add something in the server side?

slate bloomBOT Dec 18, 2024, 1:55 PM

#

GG @azure patrol, you just advanced to level 2!

hardy rose Dec 18, 2024, 1:56 PM

#

Are you doing these things while you are on mobile network and outside of the WiFi?

azure patrol Dec 18, 2024, 1:57 PM

#

Yes... I changed it then resterted wireguard and disconnected and reconnected

hardy rose Dec 18, 2024, 1:59 PM

#

What is the IP for the server/machine you want to connect to via VPN?

azure patrol Dec 18, 2024, 2:00 PM

#

192.168.68.131 - CasaOS
192.168.68.112 - Gaming PC
192.168.68.111 - Phone

hardy rose Dec 18, 2024, 2:02 PM

#

So, if you disconnect the phone from the wifi, and then attempt to do http://192.168.68.131 with the Wireguard tunnel active

azure patrol Dec 18, 2024, 2:03 PM

#

Yes I'm able to access my CasaOS server via that IP when on data

hardy rose Dec 18, 2024, 2:03 PM

#

Then your wireguard VPN connection is working 🙂

azure patrol Dec 18, 2024, 2:04 PM

#

Omg it is cause I can also access my moonlight

#

Sorry I feel like I've waster your time

#

Thank you so so much for your help

hardy rose Dec 18, 2024, 2:05 PM

#

You have not, sometimes it just takes some brain churning to get to the final destination

#"Subnet Routing" with Wireguard and CasaOS