How can I make the Wake-on-LAN (WoL) magic packet travel from the VXLAN over WireGuard to the local network on the other

ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    link/none 
    inet 10.0.0.5/24 scope global wg0
       valid_lft forever preferred_lft forever
    inet6 fdc9:281f:4d7:9ee9::5/64 scope global 
       valid_lft forever preferred_lft forever
3: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:e0:4c:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.11/24 metric 1024 brd 192.168.1.255 scope global br0
       valid_lft forever preferred_lft forever
    inet6 fe80::a4fe:29ff:fe05:4aee/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
4: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether d4:3d:7e:ff:ff:ff brd ff:ff:ff:ff:ff:ff
    inet6 fe80::c875:aeff:fe2e:e45d/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
5: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br0 state UP group default qlen 1000
    link/ether 00:e0:4c:ff:ff:ff brd ff:ff:ff:ff:ff:ff
6: enp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br1 state UP group default qlen 1000
    link/ether d4:3d:7e:ff:ff:ff brd ff:ff:ff:ff:ff:ff
7: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br1 state UNKNOWN group default qlen 1000
    link/ether fe:c7:c0:fa:ad:8e brd ff:ff:ff:ff:ff:ff
    inet6 fe80::fcc7:c0ff:fefa:ad8e/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
9: vxlan0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1370 qdisc noqueue state UNKNOWN group default qlen 1000
    link/ether 26:a6:38:d7:5e:4f brd ff:ff:ff:ff:ff:ff
    inet 10.10.10.233/24 scope global vxlan0
       valid_lft forever preferred_lft forever
    inet6 fd3c:731a:706b:0:24a6:38ff:fed7:5e4f/64 scope global dynamic mngtmpaddr proto kernel_ra 
       valid_lft forever preferred_lft forever
    inet6 fe80::24a6:38ff:fed7:5e4f/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever

Network configuration for the opposite end.

cat /etc/config/network 
config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'
        list ports 'eth2'
        list ports 'vxlan0'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '10.10.10.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wg0'
        option proto 'wireguard'
        option private_key 'ffffff'
        option listen_port '11111'
        list addresses '10.0.0.1/24'
        list addresses 'fdc9:281f:04d7:9ee9::1/64'
        option defaultroute '0'

config wireguard_wg0
        option description 'text'
        option public_key 'ffffff'
        list allowed_ips 'fdc9:281f:04d7:9ee9::5/128'
        list allowed_ips '10.0.0.5/32'
        option endpoint_host 'xy.test.com'
        option endpoint_port '11111'

config interface 'vxlan0'
        option proto 'vxlan'
        option tunlink 'wg0'
        option vid '1'
        option port '4789'
cat /etc/config/firewall
config zone 'lan'
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option masq '1'
        list network 'lan'
        list network 'wg0'
        list network 'vxlan0'

wol -i 10.10.10.255 00:d8:61:ff:ff:ff

It is specified that sending a magic packet from 10.10.10.255 can wake up a computer in the local area network, but without specifying it, it cannot wake up.

:question:

This is the openwrt configuration folder.

Very simple answer that I do not have the time to go into: port forwarding, a.k.a. masquerading, if Iā€™m not mistaken.

This sounds more like a question for the OpenWRT forum. This has nothing to do with Manjaro.

1 Like