https://netmaker.org logo
Powered by
Title
b

boundless-photographer-22783

12/06/2022, 6:25 AM
Egress connectivity issue to wan connected to openwrt with netclient
Connectivity from 
win1-wg
to 
GL-MT1300
was a success but 
GL-MT1300
set with egress 
192.168.8.0/24
failed.
whereas 
ubuntu-server
is the server configured with netclient and set with ingress & egress to 
192.169.30.0/24
Was able to successfully connect from 
win-wg
to any ip address in 
192.168.30.0/24
Following is the output of 
ip r
and it might be missing some route? 
root@GL-MT1300:~# ip r 
default via 192.168.3.1 dev eth0.2 proto static src 192.168.3.78 metric 10
10.149.240.0/24 dev nm-vpc-net proto kernel scope link src 10.149.240.6
x.x.x.x via 192.168.3.1 dev eth0.2
192.168.3.0/24 dev eth0.2 proto static scope link metric 10
192.168.30.0/24 dev nm-vpc-net scope link
192.168.8.0/24 dev br-lan proto kernel scope link src 192.168.8.1
Following is the output of 
netclient list
root@GL-MT1300:~# netclient list | jq .
{
  "networks": [
    {
      "name": "vpc-net",
      "node_id": "64be95c3",
      "current_node": {
        "name": "GL-MT1300",
        "interface": "nm-vpc-net",
        "private_ipv4": "10.149.240.6",
        "public_endpoint": "y.y.y.y"
      },
      "peers": [
        {
          "public_key": "07jhzFl2c=",
          "public_endpoint": "x.x.x.x:51821",
          "addresses": [
            {
              "cidr": "10.149.240.254/32",
              "ip": "10.149.240.254"
            },
            {
              "cidr": "10.149.240.4/32",
              "ip": "10.149.240.4"
            },
            {
              "cidr": "10.149.240.7/32",
              "ip": "10.149.240.7"
            },
            {
              "cidr": "10.149.240.3/32",
              "ip": "10.149.240.3"
            },
            {
              "cidr": "10.149.240.5/32",
              "ip": "10.149.240.5"
            },
            {
              "cidr": "10.149.240.2/32",
              "ip": "10.149.240.2"
            }
          ]
        },
        {
          "public_key": "QHHP75Uk0=",
          "public_endpoint": "192.168.30.44:10664",
          "addresses": [
            {
              "cidr": "10.149.240.8/32",
              "ip": "10.149.240.8"
            }
          ]
        },
        {
          "public_key": "bUZtF1paCk0=",
          "public_endpoint": "192.168.30.4:51821",
          "addresses": [
            {
              "cidr": "10.149.240.1/32",
              "ip": "10.149.240.1"
            },
            {
              "cidr": "192.168.30.0/24",
              "ip": "192.168.30.0"
            }
          ]
        }
      ]
    }
  ]
}
Whereas the following is 
ip r
of unbuntu server 
default via 192.168.30.1 dev enx9096f3493694 proto dhcp metric 101
10.149.240.0/24 dev nm-vpc-net scope link
10.149.240.2 dev nm-vpc-net scope link
10.149.240.3 dev nm-vpc-net scope link
10.149.240.4 dev nm-vpc-net scope link
10.149.240.5 dev nm-vpc-net scope link
10.149.240.6 dev nm-vpc-net scope link
10.149.240.7 dev nm-vpc-net scope link
10.149.240.8 dev nm-vpc-net scope link
10.149.240.254 dev nm-vpc-net scope link
x.x.x.x via 192.168.30.1 dev eno1
169.254.0.0/16 dev eno1 scope link metric 1000
192.168.30.0/24 dev eno1 proto kernel scope link src 192.168.30.200 metric 100
192.168.30.0/24 dev enx9096f3493694 proto kernel scope link src 192.168.30.4 metric 101
192.168.8.0/24 dev nm-vpc-net scope link
@User looking forward your comments
b

bored-island-21407

12/06/2022, 1:07 PM
when did you create the ingress gateway on netmaker-1, before or after you created the egress gateways?
b

boundless-photographer-22783

12/07/2022, 12:46 AM
created Ingress gateway on 
netmaker-1
first and then added 
GL-MT1300
with netclient egress
something similar to the setup i did for 
ubuntu server
with netclient egress
b

bored-island-21407

12/07/2022, 12:49 AM
When you create an extclient, the config that it recieves is a snapshot of the network at that point in time. If you add new gateways after that, the extclient doesn't get the update
b

boundless-photographer-22783

12/07/2022, 12:51 AM
yes, I got that.. on the extclient i have added 
192.169.8.0/24
as a part of Allowed IPS along with 
192.169.30.0/24
I was able to connect to router with 
192.169.8.1
but not any other ip address in 
192.169.8.0/24
looks like some settings got to do with OpenWRT firewall to allow egress
@bored-island-21407 , https://discord.com/channels/825071750290210916/998635794149421066/998646315519053884 message helped to resolve.
Now from ext client I am able to reach both 
192.168.8.0/24
and 
192.168.30.0/24
#clientJoin Discord
Powered by