https://netmaker.org logo
Powered by
general
  • b

    billowy-scooter-48638

    02/19/2022, 8:16 PM
    and when i create a new network and add a new node to that network... it breaks the first network
  • b

    billowy-scooter-48638

    02/19/2022, 8:17 PM
    like i stop being able to ping
  • b

    billowy-scooter-48638

    02/19/2022, 8:17 PM
    and two of my nodes on the first network become unhealthy
  • b

    brash-tomato-28082

    02/19/2022, 8:37 PM
    which endpoint?
  • b

    brash-tomato-28082

    02/19/2022, 8:38 PM
    works on my mobile devices on LTE and all netcliebt devices for me
  • b

    brash-tomato-28082

    02/19/2022, 8:38 PM
    weirdddd
  • a

    average-sundown-12929

    02/19/2022, 9:02 PM
    on either side - if you are trying to route all public internet traffic down a link - you need to not include the public IP of the node you are trying to connect to
  • a

    average-sundown-12929

    02/19/2022, 9:03 PM
    There are tools if you google that can help you build the AllowedIPs entry whilst excluding ranges that you want/need to go over your physical network interface
  • a

    average-sundown-12929

    02/19/2022, 9:04 PM
    Not sure if netmaker does this automatically - I had to do it manually for my Ext. Clients
  • a

    average-sundown-12929

    02/19/2022, 9:04 PM
    could just be my setup though
  • b

    billowy-scooter-48638

    02/19/2022, 9:12 PM
    do you set the allowedip with the public IP on the wireguard profile or on the netmaker config
  • a

    average-sundown-12929

    02/19/2022, 9:13 PM
    Are we talking about an ExternalClient?
  • b

    billowy-scooter-48638

    02/19/2022, 9:13 PM
    ya
  • b

    billowy-scooter-48638

    02/19/2022, 9:13 PM
    the UI description says : "Allowed IPs: Additional private addresses given to the node (in addition to the IPAddress and IPv6Address). Useful in some scenarios where there is a known address a server should have. Any IPs added here will be tacked onto the AllowedIPs of other peers, so this node will be shown to have multiple reachable private addresses."
  • b

    billowy-scooter-48638

    02/19/2022, 9:14 PM
    but not sure if that gets reflected down to the wireguard config for externalclient?
  • a

    average-sundown-12929

    02/19/2022, 9:17 PM
    I'm guessing that "Additional private addresses" means that you'd need to designate 1 server as the Egress gateway (but all traffic for all nodes matching the AllowedIPs that you are routing will go out that node) - after that - generate the ExternalClient config and it might generate it correctly
  • a

    average-sundown-12929

    02/19/2022, 9:17 PM
    If that don't work - you could take the approach I did
  • a

    average-sundown-12929

    02/19/2022, 9:21 PM
    Don't specify an egress node - connect directly to a node that you want to egress public traffic out of - define it as an Ingress Node - your ExternalClient (the netmaker ExternalClient will be mostly correct) - (you may need to configure NAT on the ingress/egress node) then update the AllowedIPs to the public block (being sure to filter out the Node you are connecting to's IP address (the endpoint in the ExternalClient config))
  • b

    billowy-scooter-48638

    02/19/2022, 9:23 PM
    ah gotcha
  • b

    billowy-scooter-48638

    02/19/2022, 9:30 PM
    that approach might work better for me because it breaks my setup with two networks when on one network i create an egress node with public ips
  • u

    user

    02/19/2022, 11:07 PM
    Hey everyone, finally got netmaker working and understand how it works, took me some time to get that right. I'm having an issue with the DNS, I can't set any custom dns entry, the server cannot even find the default entries, can someone point me in the right direction?
  • b

    billowy-scooter-48638

    02/20/2022, 1:52 AM
    Are you talking about the net maker server or net client
  • a

    average-sundown-12929

    02/20/2022, 12:44 PM
    I think you might need to configure your node(s) to include the netmaker dns server as one of your dns servers. You could try nslookup to see if the netmaker dns server is resolving
  • b

    billowy-scooter-48638

    02/20/2022, 4:48 PM
    trying to implement your setup. i don't think i'm doing it correctly
  • b

    billowy-scooter-48638

    02/20/2022, 4:48 PM
    here's my node config on netmaker
  • b

    billowy-scooter-48638

    02/20/2022, 4:49 PM
    i've nat'd the tunnel to eth0 on the ingress node
  • b

    billowy-scooter-48638

    02/20/2022, 4:49 PM
    and then edited the allowedips in the netmaker generated config to exclude the endpoint, for both the netmaker server and the ingress node
  • b

    billowy-scooter-48638

    02/20/2022, 4:50 PM
    not able to ping anything outside of the network
  • b

    billowy-scooter-48638

    02/20/2022, 4:50 PM
    like 1.1.1.1 or 8.8.8.8
  • b

    billowy-scooter-48638

    02/20/2022, 5:31 PM
    not sure if it is an iptables issue, i'm not super good at iptables
1...211212213...268Latest