Example config for ipv4?

[privacyguy123]

I've seen a writeup here https://vincent.bernat.ch/en/blog/2017-vxlan-linux that some say could help multicast devices work over a WireGuard Tunnel. If this is indeed possible can you help me set this up with ipv4 addresses rather than 6? That is the part that's confusing me. :/

I don't understand what goes here local 2001:db8:1::1

[m13253]

The configuration my program generates supports multicast on both IPv4 and IPv6. However, using IPv4 multicast across multiple network interfaces is very troublesome, I would say it’s better if our application can avoid it as much as possible.

[bmullan]

I actually used Vincent's blog as tech ideas for when I made my own needs.

I use Ubuntu & LXD VMs & Containers. I wanted a "full mesh" wireguard based VPN to connect LXD Containers running on Host servers on AWS, Digital Ocean & Hetzner (europe) clouds.

I needed both L2 & L3. I used vxwireguard-generator, the Free Range Router (FRR) app for BGP & routing.

I even made a YouTube video of a start to finish install.

vxwireguard-generator was a big part of the solution.

https://github.com/bmullan/CIAB.Full-Mesh.VPN.Wireguard.FRR.BGP.VXLAN.Internet.Overlay.Architecture

On Wed, Oct 4, 2023, 5:41 AM privacyguy123 @.***> wrote:

I've seen a writeup here https://vincent.bernat.ch/en/blog/2017-vxlan-linux that some say could help multicast devices work over a WireGuard Tunnel. If this is indeed possible can you help me set this up with ipv4 addresses rather than 6? That is the part that's confusing me. :/

— Reply to this email directly, view it on GitHub https://github.com/m13253/VxWireguard-Generator/issues/14, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAM23JYD3KLIGH5MMQWTV33X5UVMVAVCNFSM6AAAAAA5SKLRZSVHI2DSMVQWIX3LMV43ASLTON2WKOZRHEZDKOBQHAZDKMY . You are receiving this because you are subscribed to this thread.Message ID: @.***>

[privacyguy123]

Perhaps there is a way to already attach this VXLAN to the bridge already existing inside asuswrt-merlin? The WireGuard server is also embedded in the firmware ... I'm not sure how to take the information from these writeups and apply it to my setup.

I need L2 for multicast/upnp/remote stuff to work over L3 WireGuard tunnel, as far as I understand.

The configuration my program generates supports multicast on both IPv4 and IPv6. However, using IPv4 multicast across multiple network interfaces is very troublesome, I would say it’s better if our application can avoid it as much as possible.

I've tried using your generator but not sure how to apply it to my router as it won't accept the config file inside the firmwares built in Wireguard ... I'm not even sure that's what I need because I don't have 2 "nodes" and I've no idea what IP addresses I'm supposed to be feeding it. My LAN is 192.168.50.1 and my built in WG Server is on 10.6.0.1. My router firmware supplies my phone with a generated config file to tunnel into the router, but multicast/upnp/remote stuff doesn't work over L3 when connected in from outside.

[m13253]

I don't understand what goes here local 2001:db8:1::1

I guess what you are asking for, is the public addresses of the nodes. It can be either IPv4 or IPv6.