AmneziaWG Obfuscation tunnel doesn't work between Brume 3 and Beryl AX

Hi,

I am trying to set up the official GL.iNet AmneziaWG obfuscation scenario with Brume 3 as the home VPN server and Beryl AX as the travel router client. Both devices are running the latest stable firmware.

The Brume 3 is connected behind a FRITZ!Box 6660 (my home router), and I configured UDP port forwarding (51820) from the FRITZ!Box to the Brume 3. WireGuard Server is enabled on the Brume 3, “Enable Obfuscation” is turned on, and I exported the client profile exactly as shown in the official GL.iNet tutorial. The exported config contains the AmneziaWG parameters (Jc, Jmin, Jmax, S1/S2, H1-H4), so obfuscation seems to be enabled correctly.

The config imports successfully into the Beryl AX via WireGuard Client, but the tunnel status remains yellow and no traffic counters increase on the Brume 3 side. The Beryl logs contain “ACTION=REKEY-GIVEUP” (attached). I tested this via mobile hotspot.

Could you please help me with this? Thanks!

And you updated your Beryl AX to the latest 4.9 beta?
If so, can you connect to your Brume 3 with other devices, like a smartphone?