Wireguard on 1.4 latest 3/25 releast and earlier does not listen on configured port

I have a remote site with dual routers I’m trying to connect to a hub over wireguard that is not working with either hub router.

I notice that the remote site, which is not vyos but a unifi security gateway, lists the wireguard port as a listening port in netstat -pnl.

However I do not see a listening udp port on either vyos router in the hub. Any ideas why this is not listening?

set interfaces wireguard wg0 address '10.234.0.6/30'
set interfaces wireguard wg0 address 'fd00:f9a8:baad:2::2/64'
set interfaces wireguard wg0 peer xx allowed-ips '0.0.0.0/0'
set interfaces wireguard wg0 peer xx allowed-ips '::/0'
set interfaces wireguard wg0 peer xx preshared-key 'xxxxxxx='
set interfaces wireguard wg0 peer xx pubkey 'xxxxxx'
set interfaces wireguard wg0 port '51280'
set interfaces wireguard wg0 private-key 'xxx'

I’ve regenerated the keypair on two separate routers and when I try to connect, I see the packets in tcpdump but no traffic into wireguard, such as no handshake. Also no activity in the kernel debug feature for wireguard does not show any errors.
I’ve also created a test interface between both hub routers to similar results

Hardware in the hub are two pc engine apu2 in the hub

Which version of VyOS are you using?

I’m on 1.4 20210325 build, also had issues with the 0316 build

I chose a different listening port and the same behavior is present

Also manually setting up another interface still does not listen

wg set wg1 listen-port 24680 private-key /config/auth/wireguard/xxx/private.key peer xxxx allowed-ips 0.0.0.0/0 preshared-key /config/psk

reboot fixed it on both routers…

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.