https://netmaker.org logo
#netmaker
Title
# netmaker
m

many-airline-32588

06/26/2022, 4:22 PM
I may not be understanding this correctly. If I setup a node as egress I should be able to access any of the IP's on the same LAN right? Say it's on 192.168.0.0/16 and I use that for the egress gateway then I should be able to connect to any machine on that network without having to have netclient on them right? Despite having a node setup as engress I can only access the node its self, none of the machines on the network it's setup to egress. I've tried pinging a machine on that network from the egress node and it's able to reach them.
b

bored-island-21407

06/26/2022, 4:23 PM
Is IP forwarding enabled on the egress node?
also the egress range cannot overlap with any networks on the node you are connecting from. If the node you are trying to ping from also has 192.168.0.0 network it will not work
m

many-airline-32588

06/26/2022, 4:27 PM
I have not. (tbh I'm figuring this all out as I go)
There isn't any network overlap
b

bored-island-21407

06/26/2022, 4:28 PM
Ok, probably IP forwarding then
m

many-airline-32588

06/26/2022, 4:28 PM
Looks to be enabled.
b

bored-island-21407

06/26/2022, 4:29 PM
What os
m

many-airline-32588

06/26/2022, 4:30 PM
Oracle Linux. Also tried it on opnsense and had the same issue
b

bored-island-21407

06/26/2022, 4:30 PM
could be iptables rule not permitting forwarding
m

many-airline-32588

06/26/2022, 4:30 PM
I'll check into that
b

bored-island-21407

06/26/2022, 4:35 PM
If you set up a route via the public IP of the egress node, can you ping?
You may not be able to do that
m

many-airline-32588

06/26/2022, 4:39 PM
It doesn't have a public IP but I am able to connect to outside the network via wireguard.
b

bored-island-21407

06/26/2022, 4:40 PM
#what is the wg endpoint of the egress node
m

many-airline-32588

06/26/2022, 4:43 PM
What do you mean?
b

bored-island-21407

06/26/2022, 4:44 PM
what is output of wg show. (obscure your private key)
m

many-airline-32588

06/26/2022, 4:51 PM
My engress node/network is 10.7.0.0/16. My external client is on 192.168.0.0/16. My wg network is 10.1.0.0/16.
b

bored-island-21407

06/26/2022, 4:55 PM
192.168.0.0/16 is not in your allowed ips. How do you expect to ping that network
m

many-airline-32588

06/26/2022, 4:55 PM
I'm trying to reach the 10.7.0.0/16 network. The 192 was just for an example.
b

bored-island-21407

06/26/2022, 4:56 PM
That's not in your a!lower ips either
m

many-airline-32588

06/26/2022, 5:00 PM
Ah...do I have to add that manually? I figured enabling egress on the node would do that.
b

bored-island-21407

06/26/2022, 5:01 PM
No, what version of netmaker
m

many-airline-32588

06/26/2022, 5:01 PM
0.14.3
b

bored-island-21407

06/26/2022, 5:02 PM
Was that the wg show from the node you are trying to ping from
m

many-airline-32588

06/26/2022, 5:04 PM
That was from the egress node it's self. This is the external client I'm trying to ping from. It can reach the egress node, just nothing on 10.7.0.0/16 where it's suppose to egress
b

bored-island-21407

06/26/2022, 5:06 PM
That's looks ok
m

many-airline-32588

06/26/2022, 5:10 PM
Idk if any of that will help
b

bored-island-21407

06/26/2022, 5:11 PM
Can you ping the egress range from the other node or netmaker container
m

many-airline-32588

06/26/2022, 5:13 PM
Nope. That other node is also on the egress network. I was trying to use it originally and just haven't removed it (10.1.0.2)
The netmaker server cannot ping the egress network though
b

bored-island-21407

06/26/2022, 5:15 PM
Netmaker server or netmaker container? The server doesn't have wg
m

many-airline-32588

06/26/2022, 5:17 PM
In the container
b

bored-island-21407

06/26/2022, 5:18 PM
If the netmaker container cannot ping the egress then the ext client won't be able to either
ICMP blocked?
m

many-airline-32588

06/26/2022, 5:20 PM
It might be. The egress network is behind opnsense firewall.
Not sure what I'd need to allow on the firewall in all honesty. I'll just keep messing around and hopefully I'll get something to work, going to grab a bite to eat for now. Thanks a ton for the help! I appreciate it.