Post #2622220

That was quite a good evening of recreational networking: #UniFi router connected via #Wireguard to a #Mikrotik. It took a bit of jiggerypokery around firewall and NAT rules on the UniFi, but eventually - thanks to a Reddit comment or two - I have persuaded the WG client to act as a site-to-site VPN. I'm quite pleased. The key? Adding a NAT bypass rule to stop the UniFi masquerading the LAN into the WG VPN. And a PBR rule to direct VPN traffic accordingly. And some FW rules for the incoming.