Routing doesn't work as expected for networks

Follow

S B

• December 12, 2023 21:09
• Edited

Hi,

I have the following setup, on a Firewalla Gold (Box version: 1.9770 (commit id: 4e7439ac)):

- A network, with several devices connected to it. Some are connected to a Wireguard VPN, some are not

- I have a route defined as follows:

    - Domain: somedomain.com

    - On: Network 1

    - WAN: ISP-1

I see that the route only works when the device is not connected to the Wireguard VPN.

As soon as I connect the device to the VPN, the rule stops working.

PS:
When looking at the iptables, I also see that the following rule, which corresponds to the route above is only hit when my device is not connected to the VPN:
2   128 SET        all  --  any    any     anywhere             anywhere             match-set c_net_daed438b-b8a0_set src,src match-set c_bd_53_set dst ctdir ORIGINAL /* rule_53 */ map-set c_rt_hard_edae

0

• 

  Firewalla

  • December 12, 2023 21:19

  WireGuard device is a separate virtual device. You will need to apply the route there as well. 

  2

  Comment actions Permalink
• 

  S B

  • December 12, 2023 21:23

  I see. Thanks for the quick answer !

  0

  Comment actions Permalink
• 

  S B

  • December 12, 2023 21:30

  Is it possible to do that from the App ?

  0

  Comment actions Permalink
• 

  Firewalla

  • December 13, 2023 04:59

  See below.    

  - Domain: somedomain.com

      - On: [Find your WireGuard Profile Name]

      - WAN: ISP-1

  0

  Comment actions Permalink
• 

  S B

  • December 13, 2023 07:44
  • Edited

  There's no option to select my WireGuard Profile Name in "On:". Only Networks, Devices and Groups are possible.
  Moreover, when I select a specific device, instead of a whole network, it works for that specific device even if it's connected to the Wireguard VPN. So it sounds like a bug.

  0

  Comment actions Permalink
• 

  Firewalla

  • December 13, 2023 16:46

  When you tap ON, you can search for the name of the wireguard profile you installed on another device. Anyway, i have created a ticket for you, so we can follow up. 

  0

  Comment actions Permalink

Please sign in to leave a comment.