Access the second router interface via the IB3

    • Hello everyone,

    I wanted a Wireguard VPN server at home and now I have “hung” a GL iNet Brume 2 into the network (IB LANport->Brume 2 WANport).

    I was now able to activate the Wireguard server on the Brume 2 and everything runs smoothly.

    I can establish a VPN connection to the Brume 2 from externally and can then access all devices in the internal network via IP.

    The only problem at the moment is that if I want to configure a new Wireguard client, I have to connect a network cable to the Brume 2 to get to the Wireguard server.

    Now my actual question, can I configure my internal network (IB3) so that I can access the Brume 2 from it?

    So far I have tried the following, unfortunately without success:

    - I connected to Wireguard, and then connected it via the IP of the Brume 2 (192.168.9.1) and also via the IP that the Brume 2 got from the IB (192.168.1.149).

    - Access the Brume 2 in the IB’s internal network via 192.168.1.149

    - I have created a static route. 192.168.9.0, 255.255.255.0 to 192.168.1.149 and then tried it.

    Unfortunately, everything didn’t work. Do I have to open certain ports on Brume 2?

    ps. I’m also trying to solve the problem in a GL iNet forum, but with my English it’s a bit difficult via Google Translate 🙂

    Show original language (German)

    • I read somewhere on the web that port 80 has to be opened in the Brume firewall

    Another update

    In the Wireguard Server settings, the option “Allow remote access to the LAN” was disabled.

    Now I can also get to Brume 2 via the Wireguard tunnel

    Show original language (German)

    If access to the router GUI via the VPN tunnel now works correctly via the LAN, I would recommend closing port 80 again, because you should never expose the WAN side of a router directly to the outside world for security reasons.

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    It’s easier to implement (except accessing the GUI 😀)

    Buy a Brume 2, plug it into the network and start the Wireguard server in the GUI and it’s up and running.

    In about 5 minutes I had my Wireguard server set up and it was ready to use.

    It’s just something for the lazy 😀, not-so-savvy users and only costs $59

    Show original language (German)

    @Tom459

    Where did you buy the “Brume 2” so cheaply, according to Google the devices are a lot more expensive in Switzerland?

    Show original language (German)

    Installationen, Netzwerk, Internet, Computertechnik, OS Windows, Apple und Linux.

    I ordered it via Amazon and had it sent to a German work colleague. But it’s also more expensive on Amazon now.

    GL iNet still offers it in their store for 59.- (the plastic version).

    [https://store.gl-inet.com/products/brume-2-gl-mt2500-vpn-security-gateway?variant=39852201803870](https://store.gl-inet.com/products/brume- 2-gl-mt2500-vpn-security-gateway?variant=39852201803870)

    Show original language (German)

    @Tom459 wrote:

    It’s easier to implement (except accessing the GUI 😀)

    Buy a Brume 2, plug it into the network and start the Wireguard server in the GUI and it’s up and running.

    In about 5 minutes I had my Wireguard server set up and it was ready for use.

    It’s just something for the lazy 😀, not-so-savvy users and only costs $59

    Well, that’s fine then…

    You could install Pi-hole on the Raspi at the same time as the Wireguard server. At a similar price…

    But to each as it suits them

    Show original language (German)

    ….keep on rockin' 🤘🏼🤘🏼🤘🏼

    @POGO 1104 wrote:

    @Tom459 wrote:

    It’s easier to implement (except accessing the GUI 😀)

    Buy a Brume 2, plug it into the network and start the Wireguard server in the GUI and it’s up and running.

    In about 5 minutes I had my Wireguard server set up and it was ready for use.

    It’s just something for the lazy 😀, not-so-savvy users and only costs $59

    Well, that’s fine then…

    You could install Pi-hole on the Raspi at the same time as the Wireguard server. At a similar price…

    But to each as it suits them

    That’s true, of course.
    I installed a Pi-hole on a virtual machine on the Synology NAS, but to be honest I’m not using it right now. It was more of an experimental project

    Show original language (German)

    @Tom459 wrote:

    @POGO 1104 wrote:

    @Tom459 wrote:

    ……

    …..

    I installed a Pi-hole on a virtual machine on the Synology NAS, but to be honest I’m not using it right now. It was more of an experimental project

    You could also have activated the VPN server on the Synology NAS 😉

    At least OpenVPN, I don’t know what it looks like with Wireguard, probably via “detours”….

    https://idomix.de/wireguard-vpn-server-auf-synology-diskstation

    Show original language (German)

    ….keep on rockin' 🤘🏼🤘🏼🤘🏼

    I have used Open VPN on Synology so far.

    I set up the Wireguard server from iDomix once, but the problem with installing it is that you don’t have a GUI and therefore have to record all clients manually.

    Other instructions (e.g. Apfelcast) always said that you have to adjust something to the system via SSH and I prefer to leave it alone.

    Here is a screenshot from the iDomix “course” on the subject of creating a client:

    Screenshot-WG.png

    Show original language (German)

    @Tom459

    Now that it is configured correctly, in my opinion there is nothing wrong with the Brume 2 device.

    Largely preconfigured and easy to put into operation.

    If it now runs stably in the long term, and perhaps the USB interface would also be suitable for a mini-Nas, that would be a very good price/effort/performance ratio.

    PS: By the way, I’ve also been using the WireGuard/Pi-Hole combination on a Raspi for a long time, analogous to @POGO 1104, which runs very well and stably, but required a lot of training time, as with mine The Pi4 starter kit at the time was different than described by the seller, there wasn’t even a pre-installed Linux operating system on the SD card and since I didn’t exactly have hardware within reach for writing to SD cards at the time, First of all, I had to go buy an additional USB SD card adapter… 🙂

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    @Werner

    Did you have to use an additional cooler with the “Raspi” or did you leave everything in its original state?

    Show original language (German)

    Installationen, Netzwerk, Internet, Computertechnik, OS Windows, Apple und Linux.

    @WalterB wrote:

    @Werner

    Did you have to use an additional cooler with the “Raspi” or did you leave everything in its original state?

    No, it’s all original kit including the case without active cooling or any other accessories and the CPU temperature still never goes above 55-57 degrees, which is absolutely no problem.

    By the way, it only becomes really critical for the SOCs around 95 degrees anyway, which means everyone who is worried about 75 degrees or more would actually still have enough safety reserve 🙂

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche Abhängigkeiten zur Swisscom

    6 months later