Bidirectional traffic. How to?

[modusCell]

Hi guys,

I recently found this firefly project and it's super easy to set up and use. Thanks a bunch for your work!

I'm having a bit of a hiccup with bidirectional traffic between the server and the LAN.

I have a VPS (remote) and at home, I've got an openWRT router. I'm running firefly on the VPS side, and here's my configuration.

{
    "version": 4.3,
    "host": "194.xxx.xxx.xxx",
    "port": 50121,
    "auto_ssl": false,
    "password": "firefly",
    "lang": "en",
    "ui_traffic_stats": true,
    "ui_chart_type": 2,
    "log_level": "info",
    "wg_private_key": "kCy77Kcks..........BiCs=",
    "wg_device": "ens6",
    "wg_port": 50120,
    "wg_mtu": 1420,
    "wg_persistent_keepalive": 25,
    "wg_address": "192.168.10.1/24",
    "wg_dns": "194.xxx.xxx.xxx",
    "wg_allowed_ips": "192.168.10.0/24, 192.168.1.0/24, 192.168.2.0/24",
    "wg_proxy_address": ":50122"
}

Peers:

[
  {
    "id": "230a1e2f-....................................",
    "name": "UKRohan",
    "address": "192.168.10.2",
    "privateKey": "QNB0k2GaW............9woIFg=",
    "preSharedKey": "",
    "allowedIPs": "192.168.10.0/24, 192.168.1.0/24, 192.168.2.0/24",
    "createdAt": "2025-01-01T05:58:05.248577279Z",
    "updatedAt": "2025-01-01T05:58:05.248577369Z",
    "enabled": true
  }
]

I've got everything set up from LAN to Server (VPS), but I'm having trouble connecting to local subnets like 192.168.1.0/24 from server (VPS). Any ideas what might be causing this issue?

Interface

Firewall:

Routes on server (VPS)

root@ubuntu:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         194.xxx.xxx.1    0.0.0.0         UG    100    0        0 ens6
169.254.169.254 -               255.255.255.255 !H    0      -        0 -
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.31.0.0      0.0.0.0         255.255.0.0     U     0      0        0 br-28fb4a49e769
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 firefly
192.168.64.0    0.0.0.0         255.255.240.0   U     0      0        0 br-2f373dffd7fa
192.168.112.0   0.0.0.0         255.255.240.0   U     0      0        0 br-cfe54d159cc7
194.164.93.1    0.0.0.0         255.255.255.255 UH    100    0        0 ens6
212.xxx.xxx.16  194.xxx.xxx.1    255.255.255.255 UGH   100    0        0 ens6
212.xxx.xxx.17  194.xxx.xxx.1    255.255.255.255 UGH   100    0        0 ens6

I'm trying to connect to LAN subnets from my server. Any suggestions would be great! Thanks a bunch!

Cheers,
-mo

[Safe3]

Make sure you can connect to the server udp port 50120, there should be no problem! May be you can try to use the PC or mobile client to see if the server work or not

[modusCell]

@Safe3 from client to server, there is no problem. Client can connect to server okay, traffic routed over VPN and everything. The only problem is I can't reach LAN from server.
cheers,
-mo

[Safe3]

Normally, it is possible to connect to the intranet from the server. You can try installing the client on other machines to see if it can connect

[modusCell]

I have tried on my laptop, it's the same. I am using native Wireguard it's working fine, I wanted to use firefly because of the UI.
thank you for your reply.

[Safe3]

It works perfect for both side in my environment, when I ping the client from the Firefly server.

[modusCell]

@Safe3 thank you for reply. I am sure it is working for you and most people. What I am trying to understand if am I doing it wrong. This is why I sent my configs. I need a bit technical help other than "it's working on my computer".
Thank you.