u/ErnLynM

Connect a remote lan to a separate lan without changing settings on either remote LAN router

I'm trying to figure out how to let my adult kids access my locally hosted game services without opening network ports on my router. I can't change the settings on their routers, because they're locked down by the ISP and getting new routers isn't a realistic option for them

Is an exit node at their homes about to basically intercept a fqdn request from any device on their LAN and tunnel it through the VPN while still allowing them to browse the Internet and their home lan from their own ISP? If I could set up something like a raspberry pi as an exit node, would they just be able to plug it into an whether cable and power it on with no added configuration on their end?

reddit.com
u/ErnLynM — 5 days ago

I've spent the entire day trying unsuccessfully to get a raspberry pi 4b running libreelec 12.2.1 to connect to my Unifi vpn server using the wireguard protocol.

It will report as connected, but the Unifi router shows no active connections, and as soon as I toggle the VPN on through either connmanctl or the kodi gui, all ssh access is nuked and I need to reboot. It will still play over the Wi-Fi or direct connection, just ssh gets nuked, but it always shows the pi's actual network IP and not the VPN vlan's network id.

Away from the computer right now, but I will comment with my downloaded WH config file from the router and the translated file I've used on the libreelec device. I'm sure I've got something wrong there, but I can't figure 6 what it is and I've become exceedingly frustrated with the whole thing. Ended up using an openvpn based connection that I have set up for another project and it's working fine with that. I'm mostly just stubbornly wanting to get wg working, as it will connect directly to my router and not to a third party solution

LibreELEC.config

[provider_wireguard]
Type = WireGuard
Name = Server_Name
Host = [MY_SERVER_IP]   <--- Annoyed that I can't use FQDN here
WireGuard.Address = [IP_ADDRESS_ON_SERVER]/32
WireGuard.ListenPort = 51820
WireGuard.PrivateKey = [PRIVATE_KEY]
WireGuard.PublicKey = [PUBLIC_KEY]
WireGuard.DNS = [DNS_IP_ON_SERVER_SIDE]
WireGuard.AllowedIPs = 0.0.0.0/0
WireGuard.EndpointPort = 51820
WireGuard.PersistentKeepalive = 25

Unifi provided config

[Interface]
PrivateKey = [PRIVATE_KEY]
Address = [IP_ADDRESS_ON_SERVER]/32
DNS = [DNS_IP_ON_SERVER_SIDE]

[Peer]
PublicKey = [PUBLIC_KEY]
AllowedIPs = 0.0.0.0/0
Endpoint = [MY_SERVER_IP]:51821
reddit.com
u/ErnLynM — 6 months ago