Questions tagged [routing]
Questions about using a router/networking, e.g. port forwarding, VPNs
2,796
questions
0
votes
1
answer
11
views
Routing a cgroup to a different table and back to the main table
I want to have the following setup. There are two interfaces: wlan0 and wg0. wlan0 is the default, wg0 is a wireguard interface, configured manually.
By default traffic goes to wlan0. But if a process ...
0
votes
1
answer
39
views
Fast switch on a slow / older router possible?
I wanted to know if this will work as intended - being that I will get full 10G link between computers on the network.
I have a router with 4 x 1G LAN ports, but I will have 10G SFP+ switches all ...
0
votes
0
answers
26
views
Route traffic to LAN IP via a public server
I'm trying to setup a homelab server that can be accessed from externally from anywhere. My assumption was that my ISP provides me a dynamic IP that I can work around with Duck DNS
Unfortunately, it ...
1
vote
0
answers
19
views
How to ping a LAN behind a VPN router client from another VPN client?
I am trying to access my LAN devices over a WireGuard VPS setup. I have 2 WireGuard peers connected to a WireGuard server having a public IP on AWS EC2 running Ubuntu. I am new to WireGuard and also a ...
0
votes
0
answers
16
views
Converting WireGuard from docker to k8s, handshake ok but no internet access
Problem: I have a working WireGuard setup in Docker (see guide: link) but am struggling to achieve internet access for clients when porting the configuration to Kubernetes with host networking. I can ...
1
vote
1
answer
18
views
Why Linux chooses shorter prefix? (strongSwan, table 220)
I'm having 2 following routes:
# ip ro show table 0|grep 10.250
10.250.0.0/16 via 10.80.1.1 dev ens5 table 220 proto static src 10.80.1.76
10.250.1.4 via 10.80.1.45 dev ens5
The first one comes ...
-1
votes
0
answers
23
views
PacketRouting from host on VM(Win 7 x64)
I have WireGuard installed on my host and VM. I connect to host machine's WireGuard. I need the packets to pass through the host system and get to the VM into the WireGuard of my VM and then out to ...
0
votes
0
answers
29
views
Unable to Ping Remote Database Server from Home WiFi Network
I am encountering a network connectivity issue when attempting to ping a remote database server from my home WiFi network. The server, identified by the IP address 192.168.100.91, is accessible via a ...
0
votes
2
answers
40
views
Default route appears on ethernet interface with DHCP disabled
I have an Ubuntu system with an ethernet interface (eth0) connected to a router that acts as a DHCP server providing a default route. However I have set eth0 to use a static address and ignore routing ...
0
votes
0
answers
26
views
IPv6 routes mysteriously disappearing on Linux
I have a complex routing setup involving an IPv6 /64 routed over Wireguard. Both ends of the wg tunnel are configured as routers (forwarding=1) and not running any automated network device management (...
0
votes
0
answers
20
views
Debian how to route traffic from/to a web app through eth0 instead of tun0 (VPN)
I have a web app which calls some public APIs which block VPN connection. I would like to route all traffic coming/going to the web app through eth0 and not through the default tun0 which is the ...
0
votes
0
answers
14
views
UDMP Wireguard Server + IPSec Site-to-site
We have a UDMP with a few VLANs : 10.92.10.0/24 , 10.92.41.0/24, 10.92.42.0/24
We have added a Wireguard server, which uses 192.168.4.0/24, and works wonderfully (clients can connect and access ...
0
votes
1
answer
37
views
Accessing resource with a single URL over two networks -- home network and remote (wireguard) network
Wireguard network
I am currently trying to setup a wireguard tunnel in this format. The reason I am using wireguard is to tunnel through my home's NAT (I do not have a static IP or access for port ...
0
votes
1
answer
21
views
multilevel sub domain no control over root domain's provider
I have a multi tenancy requirement where I need to host couple of apps in my service cloud (AWS + lambda, EC2, S3). I have a couple of UI apps in Angular(hosted in AWS-S3) and an API in Node (AWS ...
0
votes
2
answers
23
views
What determines if a packet should be routed locally or forwarded?
As seen in the diagram, when the Linux kernel receives a packet, it goes through the prerouting chain, and then a routing decision is made on whether to forward it to somewhere else or deliver it to a ...
0
votes
0
answers
22
views
Route all TCP traffic from port to another host:port
I have a wireguard config, creating a VPN between a remote server (10.0.1.1) and my local machine (10.0.1.2), so that the server can reach the local machine and vice versa.
I'd like the server to ...
0
votes
0
answers
32
views
Problems configuring OpenVPN to use the public IP and LAN as their own, for clients
I ran into a problem when configuring an OpenVPN server to use my public IP address and access devices on my local network through that server. My goal is to allow users to use my public IP and access ...
0
votes
0
answers
31
views
How do I direct connect via Ethernet two Windows machines and keep their connection to the internet via WiFi?
I have two Windows 10 laptops connected to the same router over WiFi. They can access the internet and can see each other in Explorer, file sharing works fine. I can ping one machine from the other ...
0
votes
1
answer
20
views
IPSec S2S peer B host cannot receive ICMP reply or access host resources on peer A
I've got an IPSec S2S tunnel setup. The VPN is connected, tunnel established.
Here's the network topology:
(for reference, I am Peer A)
Problem:
host A pings host B and gets reply (this is not a ...
0
votes
1
answer
35
views
Unable to get Main and Backup Routers to connect to each other
I have two networks and routers (both on Advanced Tomato by Shibby) laid out as such:
Backup Router network (192.168.1.1/24)
WAN - Xfinity
LAN - small number of clients. Importantly, main network ...
0
votes
0
answers
23
views
Can I autoconfigure both interfaces as slaac (accept_ra 1) on a non-router device?
Need clarification to the following statement
Also, due to restrictions in the IPv6 specification, it is not recommended to autoconfigure a host with multiple external interfaces (like 2 ethernet ...
0
votes
0
answers
264
views
How to configure WireGuard AllowedIPs to allow local connections and route all other traffic?
I am using WireGuard on Windows 11 to connect to a VPN server. I want to allow local connections to my Wi-Fi network, which starts with 192.168.45.1, and route all the rest of the internet traffic ...
0
votes
0
answers
74
views
How to setup static routes between multiple home networks
I have multiple networks at home and I am trying to setup static routes so computers on different networks can see each other. I don't generally do networking, so I am probably missing something ...
0
votes
1
answer
25
views
How do I connect to a device with hardcoded static subnet mask and ip?
My home network has
subnet mask 255.255.255.0
my workstation has dynamic ip currently 192.168.1.117
I want to connect to a device (an old zebra printer) with static ip and subnet and gateway setup as ...
0
votes
1
answer
124
views
Wireguard: Communicating with the peer through one interface and sending it through another
I am sorry if this is a trivial question. I've spent the last 3 days trying to sort this problem out, so I've certainly tried to find a solution myself.
I have a host with two network interfaces that ...
0
votes
0
answers
28
views
No internet connection after setuping OpenConnect server on ArchLinux
ip tuntap add mode tun dev vpn0
ip addr add 192.168.2.2/24 dev vpn0
# systemctl restart ocserv
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 8443 -j ACCEPT
iptables -...
0
votes
2
answers
297
views
How to route all the Windows traffic into WSL2?
I want to route all traffic from Windows to WSL2 (172.28.20.4), but I have little knowledge about networking.
I did try to add a route:
route add 0.0.0.0 mask 0.0.0.0 172.28.20.4
I also enabled IP ...
1
vote
1
answer
55
views
Masquerading traffic with non-default routing table
I have a network set up as follows:
┌──────┬────────┐ ┌───────────┐
│ │ eno1.1 │ │ Network A │
│ │ ├─┤ │
┌────...
0
votes
0
answers
24
views
VPN connected but routing tables unchanged
I'm trying to understand how does a VPN I'm using works.
In this case it's nordvpn, but the question should be vendor neutral focusing on the underlying Linux mechanisms and tools to check what's up ...
0
votes
1
answer
364
views
Forward Wireguard traffic through Shadowsocks
I want to set up Wireguard obfuscation through Shadowsocks because WG stopped working due to ISPs in my country starting to block Wireguard and OpenVPN connections to foreign servers.
I've tried to ...
0
votes
0
answers
63
views
AdGuard Home on home lab K8s with MetalLB - Android cellphones lose connection?
I have a K3s based Kubernetes cluster running with MetalLB as load balancer. Assigning IPs to services works like a charm. I can also access the IPs from the MetalLB IP range through a keepalived VIP ...
0
votes
1
answer
53
views
Creating an IP alias for a device on another subnet behind a VPN
I set up a site-to-site VPN with IPsec between two routers.
Router 1 (DLink DSR-250V2) controls the 11.11.11.0/24 subnet.
Router 2 controls the 192.168.1.0/24 subnet.
The tunnel itself works fine. ...
0
votes
0
answers
56
views
What if I changed my subnet mask from 255.255.255.0 to 255.255.255.255 on my Windows, will I be able to communicate with other hosts on my LAN? [duplicate]
Few days back, when I was surfing the admin panel of my router, I had found an IP address. I knew that this IP address was assigned to my router by my ISP. Also I knew that there are few other users ...
0
votes
0
answers
30
views
Network configuration of a virtual cluster with nested virtualization
I am trying to configure a virtual cluster with VirtualBox instances, which in turn, run another virtual machine (this one created with QEMU).
The following figure depicts the current set up where my ...
0
votes
0
answers
30
views
SSH troubleshooting from outside my apartment to inside
I'm trying to be able to ssh from outside (for example at work) to a computer in my home network.
This was working at my last apartment. I was on xfinity cable. I setup dynamic dns on my router (an ...
0
votes
1
answer
85
views
Mikrotik PPTP VPN - Adding automatically routes - safer alternatives
We have 5 Mikrotik routers connected with PPTP VPN. One is the server and the other 4 are clients. All of them have RouterOS v6.46.3 (stable).
Every time one PPTP breaks and reconnects I have to go to ...
0
votes
0
answers
44
views
Peers can connect to VPN server but not between themselves (Packet filtered)
I'm new into VPN topic and routing in general, and wanted to learn new thinks while setting up wireguard. However I'm facing an issue that I can't resolve for some time.
As in title: Peers can connect ...
1
vote
0
answers
55
views
how to route ocserv traffic to wireguard split tunnel
I want to route ocserv traffic to wireguard split tunnel
here is the net flow
[ (ocserv client) ] =====> [ server A (ocserv + wg server) ] <===== [ server B (wg client) ]
Because wg protocol ...
0
votes
1
answer
111
views
How do I route all my desktop's traffic through the Shadowsocks client?
I've got a Rust implementation of Shadowsocks (no plug-ins) server, which can be found here, running on my VPS but I have no idea how to configure a client correctly so that all my desktop's outgoing ...
0
votes
1
answer
105
views
Why I can’t access to internet with this vpn setup?
I try to setup a vpn between 2 networks over internet following this link https://openvpn.net/community-resources/how-to/
On my server
openvpn runs
port 1194 transfered
interface ; inet 10.9.8.1 peer ...
0
votes
0
answers
71
views
Fixing routes for an OpenVPN client using a http-proxy to connect to the commercial VPN server
On my OpenWRT router I do use passwall and a couple of internet censorship circumventing proxies.
In order to maximise the security of my home internet I am using a *reputable commercial *
VPN product....
0
votes
1
answer
134
views
Does adding a second IP as /32 with static routing cause any unintended issues?
I have a /28 network and I’d like to add a single IP (/32 network). On my Debian machine this looks like:
auto eth0
iface eth0 inet static
address 192.0.2.212/28
gateway 192.0.2.209
iface eth0 ...
0
votes
1
answer
146
views
Configuring WireGuard on Linux for WebRTC Leak Testing
I'm trying to make wireguard work with a special config, to test Browsers for WebRTC Leaks. With this said I need a config, that allows allows traffic outside of the tunnel. In Windows I could ...
2
votes
1
answer
148
views
Preserve incoming interface for answers in openwrt router
I have a Openwrt router with three interfaces:
interface br-lan: IP: 172.16.21.1 in a LAN network (172.16.21.0/24).
interface eth1: IP: 172.16.22.2 a WAN network (172.16.22.0/30) with Internet access....
0
votes
0
answers
84
views
VirtualBox internal network will allow ping and traceroute but not nc
Update: tcpdump shows only ARP traffic with nc generating ARP traffic who has 192.168.254 tell 192.168.1.64 but tracepath says tell Fedora who has 192.168.1.5. 192.168.1.5 is pingable but 264 is not. ...
0
votes
0
answers
51
views
Unable to ping from devices connected to AP to devices connected to Home Gateway in CISCO Packet Tracer
Packet Tracer Design shown here:
I am trying to ping the devices connected to the Home Gateway from the Tablets connected to the AP. The TabletPC connected to the home gateway allows me to view the ...
1
vote
1
answer
185
views
IPTables rules and networking with problems 2
My plan is to have a computer that forwards all traffic from internal interface ens19 to openvpn-interface tun0. The system has 2 physical interfaces: ens18 for local network with Internet connection ...
0
votes
0
answers
187
views
How to setup two routers seamlessly without having double NAT
I have two wireless routers, a generic one provided by ISP which is GPON ONU/Wireless router and a TP-Link.
I need an upgrade because the generic one provided by the ISp unfortunately has several ...
0
votes
0
answers
86
views
Ping not leaving linux VM
Firstly, only just learning Linux and networking, so please assume I have minimal knowledge!
Perhaps a week ago I was working on a small python script that involved pinging devices from the Kali Linux ...
0
votes
0
answers
78
views
Wireguard causing Bonjour to fail
I rely on the following Wireguard VPN to gain IPv6 access on a Windows PC
[Interface]
PrivateKey = <private-key>
Address = fd24:609a:6c18::2/64
[Peer]
PublicKey = <public-key>
AllowedIPs =...