need a hand with WG setup

From: Dimitar Vassilev <dimitar.vassilev@gmail.com>
To: wireguard@lists.zx2c4.com
Subject: need a hand with WG setup
Date: Tue, 27 Aug 2019 20:20:37 +0300	[thread overview]
Message-ID: <CAF+AZZVktGm19scLjT4Ku-JyQGyxQGfsLFSf=wybyuuiuoULQw@mail.gmail.com> (raw)

[-- Attachment #1.1: Type: text/plain, Size: 1320 bytes --]

Hello,

I'm trying to establish site to site VPN with 2 OpenWRTs 18.6.4 - linux
4.9.184

my problem is that I cannot get any ping running and cannot reach the
remote tunnel ips.
Below is my setup
# ip r
default via 95.87.xxx.xxx dev eth0.2 proto static src 95.87.xxx.xx
95.87.xxx.0/24 dev eth0.2 proto kernel scope link src 95.87.xxxxx.xxx
130.204.xxx.xxx via 95.87.xxx.x dev eth0.2 proto static
192.168.11.0/24 dev br-lan proto kernel scope link src 192.168.11.1
192.168.100.1xx/25 dev wgknxvtun0 proto static scope link
192.168.101.0/24 dev wgknxvrtun0 proto kernel scope link src 192.168.101.1
216.66.xx.xx via 95.87.xxx.1 dev eth0.2 proto static

root@OpenWrt:~# wg show
interface: wgknxvtun0
  public key: f6
  private key: (hidden)
  listening port: 51820

peer: ThW
  endpoint: 130.204.xxx.xxx:51820
  allowed ips: 192.168.100.128/25
  latest handshake: 2 minutes, 15 seconds ago
  transfer: 134.86 KiB received, 121.67 KiB sent
  persistent keepalive: every 25 seconds

  root@OpenWrt:~# wg showconf wgknxvtun0
  [Interface]
  ListenPort = 51820
  PrivateKey = xxxx

  [Peer]
  PublicKey = Tx
  AllowedIPs = 192.168.100.128/25
  Endpoint = 130.204.x.x:51820
  PersistentKeepalive = 25

I've setup a separate FW zone where input, forward and output are default.
Ideas what I'm missing are welcome.

Best,
Dimitar

[-- Attachment #1.2: Type: text/html, Size: 1766 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard