Skip to content

Commit f7c225e

Browse files
ranbelelithrar
authored andcommitted
[ZT] WARP local network exclusion (#17912)
* PCX-12488 * update android instructions
1 parent 8a3723c commit f7c225e

File tree

1 file changed

+29
-3
lines changed
  • src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings

1 file changed

+29
-3
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/index.mdx

Lines changed: 29 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ sidebar:
55
order: 2
66
---
77

8-
import { Details, GlossaryTooltip, InlineBadge, Render } from "~/components";
8+
import { Details, GlossaryTooltip, InlineBadge, Render, Tabs, TabItem} from "~/components";
99

1010
WARP settings define the WARP client modes and permissions available to end users.
1111

@@ -237,15 +237,16 @@ Creates [Split Tunnel](/cloudflare-one/connections/connect-devices/warp/configur
237237
| Windows || 2024.1.159.0 |
238238
| macOS || 2024.1.160.0 |
239239
| Linux || 2024.2.62.0 |
240-
| iOS || |
240+
| iOS || N/A[^1] |
241241
| Android || 1.4 |
242242
| ChromeOS || 1.4 |
243243

244+
[^1]: Current versions of iOS do not allow LAN traffic to route through the WARP tunnel. Therefore, this feature is not needed on iOS.
244245
</Details>
245246

246247
This setting is intended as a workaround for users whose home network uses the same set of IP addresses as your corporate private network. To use this setting, **Split Tunnels** must be set to **Exclude IPs and domains**.
247248

248-
When `Enabled`, users have the option to access local network resources (such as printers and storage devices) while connected to WARP. When the user enables **Access local network** in the WARP GUI, WARP will detect the local IP range advertised by the user's home network (for example, `10.0.0.0/24`) and temporarily exclude this range from the WARP tunnel. The user will need to re-request access after the **Timeout** expires. Setting **Timeout** to `0 minutes` will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep.
249+
When `Enabled`, users have the option to access local network resources (such as printers and storage devices) while connected to WARP. When the user turns on [**Access Local Network**](#access-local-network-as-a-user), WARP will detect the local IP range advertised by the user's home network (for example, `10.0.0.0/24`) and temporarily exclude this range from the WARP tunnel. The user will need to re-request access after the **Timeout** expires. Setting **Timeout** to `0 minutes` will allow LAN access until the next WARP reconnection, such as a reboot or a laptop waking from sleep.
249250

250251
:::caution[Warning]
251252

@@ -256,6 +257,31 @@ Enabling this setting comes with two major consequences:
256257

257258
:::
258259

260+
#### Access local network as a user
261+
262+
To turn on local network access in the WARP client:
263+
264+
<Tabs> <TabItem label="Windows and macOS">
265+
266+
1. Select the Cloudflare logo in the menu bar.
267+
2. Select the gear icon.
268+
3. Select **Access Local Network**.
269+
</TabItem> <TabItem label="Linux">
270+
271+
1. Open a terminal window.
272+
2. Run `warp-cli override local-network start`.
273+
274+
</TabItem>
275+
276+
<TabItem label="Android and ChromeOS">
277+
278+
1. Open the Cloudflare One Agent app.
279+
2. Go to **Settings** > **Advanced** > **Connection Options**.
280+
3. Select **Access Local Network**.
281+
</TabItem>
282+
283+
</Tabs>
284+
259285
#### Limitations
260286

261287
- WARP will only exclude local networks in the [RFC 1918](https://datatracker.ietf.org/doc/html/rfc1918) address space. Other IP addresses such as CGNAT are not supported.

0 commit comments

Comments
 (0)