Wireguard Wireguard Client Help

[ZebMcKayhan]

with WG am getting 50 - 65mb, even lower at times, which doesn't make sense as i thought WG is much faster than OVPN.

The first suspect should be your vpn provider. Overbooked servers are a common problem. You can see if and how it changes during the day.

 

[sammyano]

Alright, then these routes in main table should not be there. Try to remove them:

E:Option ==> ip route del 0.0.0.0/1 dev wg11 scope link

Invalid Option "ip route del 0.0.0.0/1 dev wg11 scope link" Please enter a valid option

 

[ZebMcKayhan]

E:Option ==> ip route del 0.0.0.0/1 dev wg11 scope link

Invalid Option "ip route del 0.0.0.0/1 dev wg11 scope link" Please enter a valid option

These commands are not for executing inside wgm meny. Exit wgm out to the prompt (e) then execute them. Sorry if I were not clear.

 

[ZebMcKayhan]

@sammyano
There have been some updates to wgm that never made it to stable release. I remember some important updates are still in development version. To update, use in wgm:

E:Option ==> uf dev

It may give a better user experience

 

[sammyano]

These commands are not for executing inside wgm meny. Exit wgm out to the prompt (e) then execute them. Sorry if I were not clear.

If i enter e ip route del 0.0.0.0/1 dev wg11 scope link, it exits to amtm without running the code

 

[ZebMcKayhan]

If i enter e ip route del 0.0.0.0/1 dev wg11 scope link, it exits to amtm without running the code

Sorry if I'm not clear.

You push e + [enter] to exit wgm. If this lands you in amtm you again push e + [enter] to finally exit at the shell prompt. It should look something like this:

admin@RT-AC86U:/tmp/home/root#

Then paste in the first command and hit enter. If there are no errors, paste in the second command and hit enter.

 

[sammyano]

Sorry if I'm not clear.

You push e + [enter] to exit wgm. If this lands you in amtm you again push e + [enter] to finally exit at the shell prompt. It should look something like this:

admin@RT-AC86U:/tmp/home/root#

Then paste in the first command and hit enter. If there are no errors, paste in the second command and hit enter.

Got the below error -

sammy@RT-AC86U:/tmp/home/root# ip route del 0.0.0.0/1 dev wg11 scope link
Cannot find device "wg11"

 

[ZebMcKayhan]

Got the below error -

sammy@RT-AC86U:/tmp/home/root# ip route del 0.0.0.0/1 dev wg11 scope link
Cannot find device "wg11"

Hmm, did you stop wg11 before exiting wgm?
Not sure if it makes a difference but try to skip the 'scope link'

ip route del 0.0.0.0/1 dev wg11
ip route del 128.0.0.0/1 dev wg11

If you still get the error message, could you once again give the output of

ip route

 

[sammyano]

Hmm, did you stop wg11 before exiting wgm?
Not sure if it makes a difference but try to skip the 'scope link'

ip route del 0.0.0.0/1 dev wg11
ip route del 128.0.0.0/1 dev wg11

If you still get the error message, could you once again give the output of

ip route

Yes i stopped wg11 before exiting wgm. Do i run the command ip route with wg11 stopped or running?

 

[sammyano]

Hmm, did you stop wg11 before exiting wgm?
Not sure if it makes a difference but try to skip the 'scope link'

ip route del 0.0.0.0/1 dev wg11
ip route del 128.0.0.0/1 dev wg11

If you still get the error message, could you once again give the output of

ip route

Also got same error message with -
ip route del 0.0.0.0/1 dev wg11

 

[sammyano]

@zeb, please i noticed this error when starting wg11, does it mean anything

wg_manager-clientwg11: Initialising WireGuard® VPN 'client' Peer (wg11) in Policy Mode to 50.7.114.18:250 (# N/A) DNS=10.100.0.1
grep: /proc/blog/skip_wireguard_port: No such file or directory
/jffs/addons/wireguard/wg_client: line 1345: can't create /proc/blog/skip_wireguard_port: nonexistent directory
wg_manager-clientwg11: Initialisation complete..

 

[ZebMcKayhan]

Yes i stopped wg11 before exiting wgm. Do i run the command ip route with wg11 stopped or running?

Try to go into wgm and start wg11 again.

Confirm peer is started in policy mode.
Confirm any of your 3 clients set to wan is going through vpn.

Exit wgm, exit amtm.

Try to execute the 2 commands again.

Confirm that routing now works as it should.

Go into wgm again and restart wg11.
Confirm wan routing breaks again.

does it mean anything

I wouldn't think so. It's an attempt to use the nat bypass included in newer routers. Yours don't have this function.

 

[sammyano]

ip route output -

default via xx.xx.xx.1 dev eth0
50.7.114.18 via xx.xx.xx.1 dev eth0
xx.xx.xx.0/23 dev eth0 proto kernel scope link src xx.xx.xx.xx
xx.xx.xx.1 dev eth0 proto kernel scope link
127.0.0.0/8 dev lo scope link
192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.1
208.67.220.220 via xx.xx.xx.1 dev eth0 metric 1
208.67.222.222 via xx.xx.xx.1 dev eth0 metric 1

 

[sammyano]

Try to go into wgm and start wg11 again.

Confirm peer is started in policy mode.
Confirm any of your 3 clients set to wan is going through vpn.

Exit wgm, exit amtm.

Try to execute the 2 commands again.

Confirm that routing now works as it should.

Go into wgm again and restart wg11.
Confirm wan routing breaks again.

I wouldn't think so. It's an attempt to use the nat bypass included in newer routers. Yours don't have this function.

Ran the command and now all clients can't access internet even via VPN. so I have to remove wg again. I really do appreciate your time in helping me. But, please is there a simpler way to create this rule and make it work. This is the fourth or fifth time am remving and reinstalling without joy. thanks

 

[ZebMcKayhan]

Ran the command and now all clients can't access internet even via VPN. so I have to remove wg again. I really do appreciate your time in helping me. But, please is there a simpler way to create this rule and make it work. This is the fourth or fifth time am remving and reinstalling without joy. thanks

Maybe starting over is a good idea as somethings seems really messed up.

Acouple of advice:
Before importing your client, update to latest wgm:

E:Option ==> uf dev

After importing your client make sure to stop it (or atleast check so it is stopped)
Then create your rules

E:Option ==> peer wg11 rule add wan 192.168.1.105 comment Amazon_Fire
E:Option ==> peer wg11 rule add wan 192.168.1.181 comment Galaxy_Phone
E:Option ==> peer wg11 rule add vpn 192.168.1.1/24 comment Other Clients

then set wg11 in policy mode:

E:Option ==> peer wg11 auto=P

Now you can start wg11 and hopefully everything should work.

 

[sammyano]

Maybe starting over is a good idea as somethings seems really messed up.

Acouple of advice:
Before importing your client, update to latest wgm:

E:Option ==> uf dev

After importing your client make sure to stop it (or atleast check so it is stopped)
Then create your rules

E:Option ==> peer wg11 rule add wan 192.168.1.105 comment Amazon_Fire
E:Option ==> peer wg11 rule add wan 192.168.1.181 comment Galaxy_Phone
E:Option ==> peer wg11 rule add vpn 192.168.1.1/24 comment Other Clients

then set wg11 in policy mode:

E:Option ==> peer wg11 auto=P

Now you can start wg11 and hopefully everything should work.

Ok - thanks will report back

 

[sammyano]

Ok - thanks will report back

I followed all your steps and now all clients cant access internet .

 

[ZebMcKayhan]

I followed all your steps and now all clients cant access internet .

Wtf...

Im leaning to this being a dns issue. Inside wgm, stop wg11, then change wg11 dns to something familiar, like 8.8.8.8:

E:Option ==> stop wg11
E:Option ==> peer wg11 dns=8.8.8.8
E:Option ==> start wg11

Does that change anything?

 

[sammyano]

Wtf...

Im leaning to this being a dns issue. Inside wgm, stop wg11, then change wg11 dns to something familiar, like 8.8.8.8:

E:Option ==> stop wg11
E:Option ==> peer wg11 dns=8.8.8.8
E:Option ==> start wg11

Does that change anything?

Nope, still same, tried 8.8.8.8 and 1.1.1.1

 

[ZebMcKayhan]

Nope, still same, tried 8.8.8.8 and 1.1.1.1

So, if I'm getting you right, no lan clients can access internet. Not the ones set to use wan and not the ones set to use vpn. Is that correct?

There is something not adding up here. Your wan clients should not be affected by whether or not wg11 is up.