Netclient Overwriting AllowedIPs
# clienta
ambitious-crayon-2415
01/31/2023, 9:33 PMI have a ingress & egress setup on the same node for an ext client to route all traffic to the netclient node (full tunnel VPN). I would like to access routes behind the ext client and set a custom iptables rule for the interface.
I'm currently manually editing the wireguard config, performing
wg-quick down/upambitious-crayon-2415
01/31/2023, 9:36 PMOr is there a way to set AllowedIPs to ext clients from a netclient generated config. "Overwriting" would just be manually creating a wireguard network I guess. I do want to try and use Netmaker for it at least.
j
jolly-london-20127
01/31/2023, 9:42 PM> Netclient eventually overwrites all changes when it pulls the config. Is there a way to prevent this?
jolly-london-20127
01/31/2023, 9:42 PMNetclient is overwriting the ext client config?
a
ambitious-crayon-2415
01/31/2023, 9:50 PMNo, on the egress node. Ext client is on OPNsense. I have 10.100.0.0/16 behind OPNsense that I want to expose through the egress node.
On the egress, i add 10.100.0.0/16 to AllowedIPs of the peer (OPNsense) manually. This is eventually overwritten by netclient when it pulls. Is there somewhere in Netmaker I can set AllowedIPs for ext client peers?
j
jolly-london-20127
01/31/2023, 9:51 PMnot currently no; we'll allow editing ext client settings in about a month
jolly-london-20127
01/31/2023, 9:52 PMyou can add arbitrary AllowedIPs to a node, but i dont think that helps you
a
ambitious-crayon-2415
01/31/2023, 9:53 PMI figured. Good to see it's in the works though. Thanks!
3 Views