Wireguard doesn't work

[SandyBay]

I'm trying to set up a Wireguard VPN for my OpenWRT. But it doesn't work. My VPN provider refuses to help me with my issue. I installed all required Wireguard software to my OpenWRT. I screenshot all settings that are related with VPN setup. You can see all my 9 screenshots on Imgur due to this forum has 5 images limit. Here's a link to Imgur - https://imgur.com/a/mmK0MmR
Please look at them all carefully and analyze them all deeply. What is wrong? Why does my VPN connection not work?

[krazeh]

Enable 'Route allowed IPs' on the peer. It's on the 6th image you uploaded. Restart the VPN interface.

If that doesn't work, please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
wg

[SandyBay]

@krazeh

Remember to redact passwords, MAC addresses and any public IP addresses you may have

Why MACs and IPs?

[SandyBay]

@krazeh My question in my post above is actual.

[psherman]

@SandyBay

Why MACs and IPs?

Public IPs (i.e. outside the RFC1918 addresses or CG-NAT range) need to be redacted for your privacy and security.

MAC addresses, IMO, don't really need to be redacted because knowledge of the addresses is mostly useless unless an attacker is on the same L2 network. But many people feel that this should be treated as PII in that they identify your specific devices.

@SandyBay

My question in my post above is actual.

The request for information will help us spot errors -- the config files show us in just a few quick files what might be going wrong, rather than fishing through many screen grabs. Please post the requested info.

[SandyBay]

@psherman

The request for information will help us spot errors -- the config files show us in just a few quick files what might be going wrong, rather than fishing through many screen grabs. Please post the requested info.

I mean question about redacting MACs and IPs.

[psherman]

@SandyBay

question about redacting MACs and IPs.

I answered that...

@psherman

Public IPs (i.e. outside the RFC1918 addresses or CG-NAT range) need to be redacted for your privacy and security.

MAC addresses, IMO, don't really need to be redacted because knowledge of the addresses is mostly useless unless an attacker is on the same L2 network. But many people feel that this should be treated as PII in that they identify your specific devices.

[tievolu]

@SandyBay

Here's a link to Imgur - https://imgur.com/a/mmK0MmR
Please look at them all carefully and analyze them all deeply.

Do you realise you've shared the whole of your private key in those screenshots?

[bigsmile]

I spotted it from a mile away I was stuck there for a time too.
You need to check "Route Allowed IPs" under Interfaces -> DallasVPN -> Edit Peer

[SandyBay]

@psherman

I answered that...

I read it previous time.

@tievolu

Do you realise you've shared the whole of your private key in those screenshots?

No, I changed it in one click in admin panel of my VPN provider.

@krazeh

Enable 'Route allowed IPs' on the peer. It's on the 6th image you uploaded. Restart the VPN interface.

@bigsmile

I spotted it from a mile away I was stuck there for a time too.
You need to check "Route Allowed IPs" under Interfaces -> DallasVPN -> Edit Peer

Yes, it solved my issue. Thanks.

[bigsmile]

@SandyBay

@bigsmile

I spotted it from a mile away I was stuck there for a time too.
You need to check "Route Allowed IPs" under Interfaces -> DallasVPN -> Edit Peer

Yes, it solved my issue. Thanks.

Nice , could you hit that "thanks" button and mark the thread as resolved

[SandyBay]

Of course.