#netmaker
Title
# netmaker
m
many-airline-32588
06/26/2022, 4:22 PMI may not be understanding this correctly. If I setup a node as egress I should be able to access any of the IP's on the same LAN right? Say it's on 192.168.0.0/16 and I use that for the egress gateway then I should be able to connect to any machine on that network without having to have netclient on them right? Despite having a node setup as engress I can only access the node its self, none of the machines on the network it's setup to egress. I've tried pinging a machine on that network from the egress node and it's able to reach them.
b
bored-island-21407
06/26/2022, 4:23 PMIs IP forwarding enabled on the egress node?
also the egress range cannot overlap with any networks on the node you are connecting from. If the node you are trying to ping from also has 192.168.0.0 network it will not work
m
many-airline-32588
06/26/2022, 4:27 PMI have not. (tbh I'm figuring this all out as I go)
There isn't any network overlap
b
bored-island-21407
06/26/2022, 4:28 PMOk, probably IP forwarding then
m
many-airline-32588
06/26/2022, 4:28 PMLooks to be enabled.
b
bored-island-21407
06/26/2022, 4:29 PMWhat os
m
many-airline-32588
06/26/2022, 4:30 PMOracle Linux. Also tried it on opnsense and had the same issue
b
bored-island-21407
06/26/2022, 4:30 PMcould be iptables rule not permitting forwarding
m
many-airline-32588
06/26/2022, 4:30 PMI'll check into that
b
bored-island-21407
06/26/2022, 4:35 PMIf you set up a route via the public IP of the egress node, can you ping?
You may not be able to do that
m
many-airline-32588
06/26/2022, 4:39 PMIt doesn't have a public IP but I am able to connect to outside the network via wireguard.
b
bored-island-21407
06/26/2022, 4:40 PM#what is the wg endpoint of the egress node
m
many-airline-32588
06/26/2022, 4:43 PMWhat do you mean?
b
bored-island-21407
06/26/2022, 4:44 PMwhat is output of wg show. (obscure your private key)
m
many-airline-32588
06/26/2022, 4:51 PMMy engress node/network is 10.7.0.0/16. My external client is on 192.168.0.0/16. My wg network is 10.1.0.0/16.
b
bored-island-21407
06/26/2022, 4:55 PM192.168.0.0/16 is not in your allowed ips. How do you expect to ping that network
m
many-airline-32588
06/26/2022, 4:55 PMI'm trying to reach the 10.7.0.0/16 network. The 192 was just for an example.
b
bored-island-21407
06/26/2022, 4:56 PMThat's not in your a!lower ips either
m
many-airline-32588
06/26/2022, 5:00 PMAh...do I have to add that manually? I figured enabling egress on the node would do that.
b
bored-island-21407
06/26/2022, 5:01 PMNo, what version of netmaker
m
many-airline-32588
06/26/2022, 5:01 PM0.14.3
b
bored-island-21407
06/26/2022, 5:02 PMWas that the wg show from the node you are trying to ping from
m
many-airline-32588
06/26/2022, 5:04 PMThat was from the egress node it's self. This is the external client I'm trying to ping from. It can reach the egress node, just nothing on 10.7.0.0/16 where it's suppose to egress
b
bored-island-21407
06/26/2022, 5:06 PMThat's looks ok
m
many-airline-32588
06/26/2022, 5:10 PMIdk if any of that will help
b
bored-island-21407
06/26/2022, 5:11 PMCan you ping the egress range from the other node or netmaker container
m
many-airline-32588
06/26/2022, 5:13 PMNope. That other node is also on the egress network. I was trying to use it originally and just haven't removed it (10.1.0.2)
The netmaker server cannot ping the egress network though
b
bored-island-21407
06/26/2022, 5:15 PMNetmaker server or netmaker container? The server doesn't have wg
m
many-airline-32588
06/26/2022, 5:17 PMIn the container
b
bored-island-21407
06/26/2022, 5:18 PMIf the netmaker container cannot ping the egress then the ext client won't be able to either
ICMP blocked?
m
many-airline-32588
06/26/2022, 5:20 PMIt might be. The egress network is behind opnsense firewall.
Not sure what I'd need to allow on the firewall in all honesty. I'll just keep messing around and hopefully I'll get something to work, going to grab a bite to eat for now. Thanks a ton for the help! I appreciate it.