r/WireGuard•
ExtruDR

Messed up and need help

I am on vacation and was messing around with my devices at home. Wanted to access a device that is usually accessible to me on the home LAN, but had no luck.

I have an ASUS router that is running WireGuard on it. I’ve had OK luck using it to access certain devices remotely, but I’m no expert.

Anyway, I wasn’t getting anywhere after connecting to the WireGuard VPN with my device (far away from home), so I tried messing with some settings, which is why I’m here.

I figured that the key was the AllowedIPs field and it looked like entering 0.0.0.0/0 for “client AllowedIPs” AND “server allowedips” would route everything from my remote device to the remote router running WireGuard.

I think that as soon as I updated this, the connection to the router got lost and now nothing seems to be getting in or out of my LAN.

I can still connect to the router’s WireGuard instance, and I can see that data is being transmitted (very little), but I can’t connect to the router’s interface or anything else.

Editing the remote client’s AllowedIPs is possible, but has no effect.

I feel like I barely know what I’m doing here, but I think that the top thing I am looking for help from you is to see if there’s some way to connect to the WireGuard-running router remotely so that I can disable the wrong setting and maybe get things working again.

It seems like the router is basically blocking everything right now, or trying to run everything through the mis-configured WireGuard instance that it is running.

Sorry for the newb question… I’m just kind of bummed that I blew my shit up while I was goofing around and I am away for quite a few days, so it may stay that way until I can get back home.

Posted Jun 25, 2023, 12:20 AM UTC · edited

16
ecsuae•

What do you mean by routers WireGuard instance?And how are you accessing it?

1
ExtruDROP•

I meant that my wireguard client (running on a laptop a few thousand miles from home) can connect to the router running wireguard.

I can see that it successfully connects to and authenticates with the wireguard server running on my Asus router.

I can also see that there is data being sent to it (very little, like a few kilobytes).

​

I really thought that the Asus router was running wireguard "below" the firmware, so no matter what I did, I would still have access to the management software and could re-configure or disable it remotely, but it seems that maybe it's routing all traffic to Wireguard, which has been misconfigured.

1
ExtruDROP•

When I activate the wireguard instance on a remote client (my phone or laptop) it connects and reports that data is being exchanged.

It is only a few bytes or kilobytes and I try to access various places using a browser or to ping certain machines on my network.

Nothing is actually routed through though.

1
jschwalbe•

Can you paste the configs (remove keys)? You do NOT have access to the router’s WireGuard confit any longer? If not.. probably not much you can do to fix this, sorry to say.

1
ExtruDROP•

Below is my client config (private fields cleared)

[Interface]
PrivateKey = xxx$$$ removed from this post $$$xxx
Address = 10.6.0.3/32
DNS = 10.6.0.1
[Peer]
PublicKey = xxx$$$ removed from this post $$$xxx
Endpoint = my-name.asuscomm.com:51820
PersistentKeepalive = 25

I can't access the "server" file because I can't access it remotely since changing allowedips to 0.0.0.0/24, i think,.

1
jschwalbe•

What does allowedips on your config say?

1
ExtruDROP•

I believe that on the server side it is 0.0.0.0/0

1