Wireguard doesnt allow home assistant ip, but allow other local ips

Configuration
1

I have installed pimox (proxmox in raspberry pi 4) and HA OS as a VM.
Everything works fine after many adjustments, except Wireguard HA add on.
My Wireguard configuration:

- addresses:
    - 192.168.2.84
  allowed_ips: []
  client_allowed_ips: []
  name: phone

server:

addresses:
  - 192.168.2.1
dns:
  - 1.1.1.1
host: something.duckdns.org

With my phone i enable the VPN, i try to enter 192.168.1.1 (router) or 192.168.1.200 (another local device) and everything works fine…
But if i try to go to 192.168.1.205:8123 (HA in proxmox) i get The site can't be reached. ERR_ADDRESS_UNREACHABLE
or ping 192.168.1.205 or 192.168.1.204 (raspberry pi os) i get Destination Host Unreachable…

I have no firewall (in proxmox, raspberry pi os or the home router itsself) and in the past (that i run the same wireguard configuration but with HA supervised on top of raspberry pi os) everything was fine.

2

You need to allow in you WG configuration. Try something lime

- addresses:
    - 192.168.2.84
  allowed_ips: []
  client_allowed_ips: [192.168.2.0/16]
  name: phone
3

I’ve tried 0.0.0.0/0 which supposed to let everything. I also tried 192.168.1.205/32 (which was the configuration I had before proxmox) but it won’t work either…

The thing is…why I can enter 192.168.1.x but I cannot ping only raspberry ip…or HA VM IP?
If everything was blocked it would be more logical

4

Your config puts your wireguard in the 192.168.2.0/24 range, so 192.168.1.0/24 would be a different subnet.

On your peer configuration, your allowed IP’s need to include ‘0.0.0.0/0, 192.168.1.0/24’. The first will allow you to access the internet, the second would allow you access to the local peers. This would assume your wireguard host can talk to both 192.168.1.0/24 and 192.168.2.0/24.

5

Actually i tried many possible combinations. Also 0.0.0.0/0 includes everything…even 192.168.1.0/24
And when you have [] it passes everything from VPN…
In a nutshell if i can enter 192.168.1.200 (another local device) why i cant enter HA OS (192.168.1.205)

After a lot of searching i found out, 192.168.1.204 is NOT my real rpi ip…but vmbr0 (a bridge proxmox create that link to my ethernet card). The real eth0 ip is 192.168.1.136 which i CAN ping from VPN.
So, i am almost sure its a promox issue which blocks wireguard…

6

Solved similar vm issue here…