Create site-to-site tunnel with bridged like network

pszafer

Hi,

I have STB's which works in multi-room setup.
Requirements are that they can discovery itself over MDNS, easy to achieve with Avahi, but second required thing is that both are on same subnet.

I have Network on:

router 1 - 192.168.1.0/24, router address: 192.168.1.1/24
router 2 - 192.168.1.0/24, router address: 192.168.1.99/24

With OpenVPN it was pretty easy.
I created TAP interface, assigned interfaces and bridged them.
Then I just had to block DNS requests accross tunnel and it was working.

Now I want to try Wireguard,
Will it work if I put in
Allowed IPs - 10.15.210.2/32, 192.168.1.0/24
or will it hang as it will try to add second 192.168.1./24 to routing table.

Any thoughts how to achieve what I want with Wireguard?

cmcdonald

@pszafer WireGuard is a layer 3 tunnel, not a layer 2 tunnel like OpenVPN TAP interfaces. This isn't possible with WG.

pszafer

@vbman213 I know that WireGuard is L3, but would it work if I created network

192.168.1.0/25
192.168.1.128/25

one router would be 192.168.1.1, second 192.168.1.129.
STB I'd give /24 mask, then would be then possible to somehow pass mdns packets through Avahi so mdns will appear as on same subnet?

jimp

No, that is not possible.