Wireguard Plugin - Works with Windows&Android Clients, but not with Debian Client

henfri · 6. April 2023

Hello,

I have setup wireguard via the OMV Plugin now.

Previously, I had set it up manually.

Now, I have configured all my Hosts again and they work.

Nice interface&great plugin. Thanks!

What is not yet working is the one Debian (in fact OMV5) client that I have.

I displayed the config in the Servers Webinterface. Then, I copied the content into /etc/wireguard/wgnet0.conf on the host (omv5).

Then I executed a wg-quick down wgnet0 and wg-quick up wgnet0.

Code

root@openmediavault5:/etc/wireguard# wg show
interface: wgnet0
  public key: xabc=
  private key: (hidden)
  listening port: 52988
  fwmark: 0xca6c

peer: xdef=
  preshared key: (hidden)
  endpoint: [2a00:abcd:abcd:ac00:f849:bff:fe8c:138a]:51820
  allowed ips: 0.0.0.0/0
  transfer: 0 B received, 27.03 KiB sent
  persistent keepalive: every 25 seconds

Alles anzeigen

You see, "transfer" is 0 B. So, the connection is not established.

The endpoint has been resolved correctly (the IP is correct).

What have I done wrong?

Best regards,

Hendrik

chente · 6. April 2023

Zitat von henfri

Then I executed a wg-quick down wgnet0 and wg-quick up wgnet0.

To manage the service with systemd in the OMV5 client you must do it like this:

To enable the service on the client is

systemctl enable wg-quick@wgnet0.service

To start the service is

systemctl start wg-quick@wgnet0.service

Those two commands will make the service available and active every time the client starts, assuming the interface is wgnet0.

Zitat von henfri

endpoint: [2a00:abcd:abcd:ac00:f849:bff:fe8c:138a]:51820

This is ipv6. Have you done it intentionally?

henfri · 6. April 2023

Hello,

thanks, I have enabled and started the service. However, this has not fixed the issue.

I intentionally use an ipv6, as my ISP does not provide an IPv4.

Any further hint?

Best regards,

Hendrik

chente · 6. April 2023

I can't think of anything else going on at this point. I can only think of some configuration error.

I assume you copied the configuration file from the client.

So it should work. If anything else occurs to me that might be failing I'll let you know.

What is the output of

systemctl status wg-quick@wgnet0.service

chente · 6. April 2023

I have never really tried a wireguard connection with ipv6. I think it shouldn't affect at all if the server and client handle the same protocol but this is new to me.

chente · 6. April 2023

One thing you could try is setting up that client connection on a smartphone. If it works you can rule out a server error. Then you can focus solely on the configuration of the OMV5 client.

chente · 7. April 2023

Zitat von henfri

Any further hint?

Try this.

Copy the wgnet0 client configuration to another file in /etc/wireguard. You can call it whatever you want, for example /etc/wireguard/wg0test

Enable and start the service with

systemctl enable wg-quick@wg0test.service

systemctl start wg-quick@wg0test.service

Then see if it is up and running with

systemctl status wg-quick@wg0test.service

If it is active, test the connection.

Sometimes if it's set up wrong at first it's hard to fix. This has worked for me other times.

henfri · 9. April 2023

Hello,

the server side is works. I have tried it with a smartphone. Also, from this client, I have used wireguard - also with ipv6 before.

Code

systemctl status wg-quick@wgnet0.service
● wg-quick@wgnet0.service - WireGuard via wg-quick(8) for wgnet0
   Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled)
   Active: active (exited) since Thu 2023-04-06 20:55:11 CEST; 2 days ago
     Docs: man:wg-quick(8)
           man:wg(8)
           https://www.wireguard.com/
           https://www.wireguard.com/quickstart/
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg-quick.8
           https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8
  Process: 21956 ExecStop=/usr/bin/wg-quick down wgnet0 (code=exited, status=0/SUCCESS)
  Process: 22040 ExecStart=/usr/bin/wg-quick up wgnet0 (code=exited, status=0/SUCCESS)
 Main PID: 22040 (code=exited, status=0/SUCCESS)

Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

Alles anzeigen

Is it normal, that it says "active (exited)"?

I have compared my old, manually created config (left) to the one generated by the plugin:

Differences:

Different IP-Range
Different Private and Public Key
NEW: PresharedKey
No newline in the new file end
PersistentKeepAlive (upper vs. lower case)

Zitat von chente

Copy the wgnet0 client configuration to another file in /etc/wireguard. You can call it whatever you want, for example /etc/wireguard/wg0test
Enable and start the service with
systemctl enable wg-quick@wg0test.service
systemctl start wg-quick@wg0test.service
Then see if it is up and running with
systemctl status wg-quick@wg0test.service
If it is active, test the connection.
Sometimes if it's set up wrong at first it's hard to fix. This has worked for me other times.

Alles anzeigen

I have done this. In addition to a

cp wgnet0.conf wg0test.conf , I have added a newline to the end of the file.

It works now!

Thanks!

Greetings,

Hendrik

chente · 9. April 2023

Zitat von henfri

I have done this. In addition to a
cp wgnet0.conf wg0test.conf , I have added a newline to the end of the file.
It works now!

I'm glad it works for you.

You hit a bug in addition.

Zitat von henfri

PersistentKeepAlive (upper vs. lower case)

ryecoaaron

There is a typo here. It should be PersistentKeepalive instead of PersistentKeepAlive. This will be corrected automatically by some clients when configuring the connection, others will not.

https://github.com/OpenMediaVa…ireguard/default.sls#L125 and https://github.com/OpenMediaVa…ireguard/default.sls#L107

I would send you a pull request, but I don't know how to do it right now, I haven't touched github in a while, sorry.

ryecoaaron · 9. April 2023

plugin 6.2.1 in repo with fix. https://github.com/OpenMediaVa…f2a427bc4de30e5d4d8bdd418

henfri · 10. April 2023

Perfect thanks!

Wireguard Plugin - Works with Windows&Android Clients, but not with Debian Client

chente 9. April 2023

Jetzt mitmachen!