Trouble setting up port forwarding for WireGuard reddit / selfhosted ---------------------------------------------------------------------- Dirty_Shit · 2023-11-29 21:25 Ok, I have been dealing with this for over an hour now. I got everything set up. Client and server Wireguard is set and the config files are done. How do I know they work... in the client, if I set the endpoint as [192.168.1.31:51820](https://192.168.1.31:51820) I get a good handshake (the client is a phone on my Wifi). If I exchange the endpoint IP with the IP address I got from [ping.eu](https://ping.eu), I do not get anything. I assume this is down to port forwarding but I have double-checked it and looked everywhere for any clue what have I messed up. From what I got over the internet I ended up with this: Sagemcom fast5655 (provided by Telekom IPS in Slovakia) and the setup is as: ​ [Fast5655v2 - Access Control - Port Forwarding](https://preview.redd.i t/8ay2wambtc3c1.png?width=924&format=png&auto=webp&s=d8f95fd5c6855f125 294e5bfa575f1b445f4f787) I am clueless about what is the problem. Any hint of direction or what to do, to make it handshake would be much appreciated. I will try to provide any info on my router if necessary. ---------------------------------------------------------------------- ElevenNotes · 2023-11-29 21:34 To check if your port forwarding is working you need to connect from outside of your network. Disable Wi-Fi on your phone and connect via mobile data and test again. ---------------------------------------------------------------------- Dirty_Shit · 2023-11-29 21:42 Either from mobile data or wifi, if the endpoint IP is set to my public IP I can't get it to handshake. However, it works when connected local network and setting the static IPV4 as endpoint. ---------------------------------------------------------------------- atliensarereal · 2023-11-29 22:05 your endpoint is an internal address; i'd imagine wireguard isn't going to work if you're test connection is from the same internal network as the wireguard host. as the other commenter suggested, try disabling wifi on your phone, downloading the app as well, then going to your-public-ip:51820 and testing there. if you don't know your public ip, you can get it from a website like icanhazip.com. make sure to do this on your wifi / wired internal network ---------------------------------------------------------------------- Dirty_Shit · 2023-11-29 22:13 Ok so works on: [192.168.1.31:51820](https://192.168.1.31:51820) I change the endpoint IP to: [78.XXX.35.XXX:51820](https://78.XXX.35.XXX:51820) and tried to connect on my wifi and on mobile data (not home network). Both from my mobile wireguard app to the PC server with a server running all the time. Either way, it does not work. As mentioned used the [ping.eu](https://ping.eu) but I got the same public IP that I got from icanhazip.com . I am sorry if there is any misunderstanding due to my writing. ---------------------------------------------------------------------- atliensarereal · 2023-11-29 22:15 ok so if it works internally, but not externally, can you verify that your router is pointing the port 51820 to 192.168.1.31? ---------------------------------------------------------------------- Dirty_Shit · 2023-11-29 22:38 It is the wireguard exe downloaded from the site for windows 10. The client is the Wireguard app running on Android. [https://imgur.com/a/SREwvWX](https://imgur.com/a/SREwvWX) config for the server. I will see, today is too late. I will try to contact my ISP if there is anything on their site that might be blocking it but I would bet 50$ they will say it is my mistake and I should get good or some ... :( ---------------------------------------------------------------------- atliensarereal · 2023-11-29 22:43 gotcha, sorry, i'm not familiar with the windows server for wireguard, so i can't be much help there. best of luck to you! looks like your port forwarding is correct tho so no need to get good :) ---------------------------------------------------------------------- querylab · 2023-11-30 00:48 check this [https://github.com/mochman/Bypass\_CGNAT](https://github.c om/mochman/Bypass_CGNAT) ---------------------------------------------------------------------- IllegalD · 2023-12-01 06:56 Having a read your comments, are you sure you're not behind CG-NAT? ---------------------------------------------------------------------- Dirty_Shit · 2023-12-01 08:07 Yes, that was my verdict yesterday and looked into options on how to go through it and in the end it's just not worth the cost that is around it. The end result is the server will be only LAN and if I want to play some game I will use Zerotier or some closed crap VPN like that because I don't really care about someone watching network traffic for a game. PS: I think you can feel from this comment I am a little bit sad and annoyed but it is what it is. Saying that, the community is amazing and learned so much already from all the knowledge that is up here.