[SOLVED] Cant access Proxmox GUI thru a Wireguard site to site tunnel

[guillaume14]

Hi,

I am testing Proxmox right now so my setup is quite simple. I have a a hosted PVE server with a public IP address and i can access the PVE console from my place using that IP .

I installed a pfSense server on Promox. My WAN interface has a failover IP on the internet facing interface of the server and the LAN interface (192.168.37.254/24) is connected using vmbr1, an additionnal bridge with no physical nic. When i create additionnal virtual machines i use vmbr1 for the network interface and i can get internet access thanks to the pfSense server (they get IP on the 192.168.37.0/24 network segment with 192.168.37.254 as the gateway). And i can reach Proxmox GUI using 192.168.37.1 (my CIDR on vmbr01 is 192.168.37.1/24).

If i create a Wireguard S2S tunnel beetween my place and the pfsense, i can reach any remote machine from my home PC (192.168.10.1/24) with the exception of the Proxmox server (192.168.37.1).

Sounds logical as 192.168.37.254 is not the Proxmox server gateway.... So i added a static route (ip route add 192.168.10.0/24 via 192.168.37.254) and now the proxmox server can ping any host at my place. But the opposite is not true: i still can't ping 192.168.37.1 nor access the webgui of the Proxmox server .

Any clue ?

Thanks a lot in advance and have a nice day.
Guillaume

 

[guillaume14]

Me again ...

Looks like a need to add a route for the "Wireguard Transfer Net" (10.2.2.0/24 in my setup) to gain access to the Proxmox server:
ip route add 10.2.2.0/24 via 192.168.37.254

Regards
Gullaume

 

[UdoB]

ip route add 10.2.2.0/24 via 192.168.37.254

...and possibly vice versa on the other end.