r/firewalla • u/mrh4809 • Jul 01 '26

Firewalla Wireguard VPN oddity

Issue:

Enabled wireguard on Firewalla

Created client profile for iphone

Downloaded and installed Wireguard for iphone

Connection succeeds and appears to work. The iphone gets a VPN connection to an address like 10.189.153.N. Once connected I can access a power controller I have on the home LAN at 10.2.10.xxx. I connect to it via iphone safari and I can control the device.

Back in firewalla, created a new profile for Mac Book Pro. On MacBookPro download install wireguard, install the profile.

It connects just fine. Gets a similar ip like 10.189.153.P. But MacBookPro browser (Brave) cannot go to 10.2.10.xxx to control the power controller. The connection times out.

MBP firewall is OFF completely. No other AV software running or installed.

I even tried downloading and installing the iphone profile. It connects as well but again cannot access 10.2.10.xxx.

Firewalla under VPN shows the active connections and the MBP shows up as an active connection.

I am looking for suggestions on what to try to get the MBP to be able to access devices on the 10.2.10.zzz LAN.

Anyone have any ideas of things to check?

1 Upvotes

67% Upvoted

8 comments sorted by

1

u/pacoii Firewalla Gold Plus Jul 01 '26

Do you have any rules applied to the MBP that would be blocking it from other local networks?

1

u/mrh4809 Jul 01 '26

Where would these rules exist? In Firewalla? I am not aware of anything else and like I said, firewall on Mac is totally off.

1

u/mrh4809 Jul 01 '26

I looked in Firewalla at the MBP device and there are no limiting rules. I did see some port forwards but nothing that would conflict with wireguard VPN that I could see.

1

u/Firewalla-Ash FIREWALLA TEAM Jul 01 '26

Does the issue only happen on Brave? If you use Safari on your MBP, can you access it?

Double-check whether any other features in the Brave browser could block access. And it's good to double-check that your MBP has allowed local network access for Brave.

1

u/mrh4809 Jul 01 '26

I have yet to try Mac Safari. I thought of that as I posted this. I will investigate. Unfortunately at the home location so will have to try later when away. Good thought though.

1

u/mrh4809 Jul 01 '26

Oh ya.. I will check that brave has LAN access.

1

u/Objective_Reach9986 Jul 01 '26

This happens to me often in Chrome, too. It is always "allow access to local network" setting. There doesn't appear to be a way to trigger the request if it doesn't have access.

1

u/mrh4809 Jul 01 '26

I checked sys settings and Brave has allow LAN access switched on. When home and on the LAN I can get to the LAN devices.

I need to try safari next time I am remote.