0

我在使用wireguard 设置时遇到了一些问题。我想要实现的逻辑是我将能够从客户端 1（笔记本电脑）连接到客户端 2（opensense）子网 10.88.1.1/24。

目前，从客户端到服务器一切正常，但客户端之间没有 ping 或任何其他访问。

当前设置是主wireguard服务器（ubuntu服务器）IP，例如。5.123.456.678

 [Interface]
    Address = 203.0.113.5/24
    SaveConfig = true
    PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
    ListenPort = 51820
    FwMark = 0xca6c
    PrivateKey = XXXXXXXXXXXXXXXXXXXXXXX
    
    [Peer]
    PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
    AllowedIPs = 203.0.113.13/32
    Endpoint = 89.xxx.xxx.xxx:33943
    
    [Peer]
    PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
    AllowedIPs = 203.0.113.15/32
    Endpoint = 46.xxx.xxx.xxx:4109

客户端 1（笔记本电脑）

[Interface]
PrivateKey = XXXXXXXXXXXXXXXXXXXXXXX
Address = 203.0.113.15/24
ListenPort = 51820

[Peer]
PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
AllowedIPs = 203.0.113.5/32
Endpoint = 5.123.456.678:51820
PersistentKeepalive = 5

具有子网 10.88.1.1 的客户端 2 (opensense)。

interface: wg0
  public key: XXXXXXXXXXXXXXXXXXXXXXX
  private key: (hidden)
  listening port: 51820

peer: XXXXXXXXXXXXXXXXXXXXXXX
  endpoint: 5.123.456.678:51820
  allowed ips: 203.0.113.0/24
4

1 回答 1

0

我做了更多的测试，逻辑是你需要添加

在我的情况下设置的子网或单个 IP 现在看起来像这样

服务器

 [Interface]
    Address = 203.0.113.5/24
    SaveConfig = true
    PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
    ListenPort = 51820
    FwMark = 0xca6c
    PrivateKey = XXXXXXXXXXXXXXXXXXXXXXX
    
    [Peer]
    PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
    AllowedIPs = 203.0.113.13/32, 10.88.1.0/24
    Endpoint = 89.xxx.xxx.xxx:33943
    
    [Peer]
    PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
    AllowedIPs = 203.0.113.15/32, 10.88.1.0/24
    Endpoint = 46.xxx.xxx.xxx:4109

客户端 1（笔记本电脑）

[Interface]
PrivateKey = XXXXXXXXXXXXXXXXXXXXXXX
Address = 203.0.113.15/24
ListenPort = 51820

[Peer]
PublicKey = XXXXXXXXXXXXXXXXXXXXXXX
AllowedIPs = 203.0.113.0/24,10.88.1.0/24
Endpoint = 5.123.456.678:51820
PersistentKeepalive = 5

具有子网 10.88.1.1 的客户端 2 (opensense)。

interface: wg0
  public key: XXXXXXXXXXXXXXXXXXXXXXX
  private key: (hidden)
  listening port: 51820

peer: XXXXXXXXXXXXXXXXXXXXXXX
  endpoint: 5.123.456.678:51820
  allowed ips: 203.0.113.0/24,10.88.1.0/24
于 2020-09-23T14:18:52.350 回答