Beryl 7 VPN set up issue (Neither OpenVPN nor WireGuard not working properly)

[linearkinetics]

Has anyone hit this on Beryl 7 (MT3600BE)?

WireGuard VPN client toggle in Web UI doesn't bring up the wgclient1 interface. Tested with NordVPN built-in (token auth) and self-hosted WireGuard server, both fail identically.

System state checks out:

• which wg → /usr/bin/wg

• All wireguard kernel modules loaded (lsmod | grep wireguard)

• Network path fine (tested direct to ISP modem)

• NordVPN token validates

What fails after toggle:

• wg show empty

• ip link show wgclient1 → does not exist

• /etc/wireguard/ directory doesn't exist

• Logread shows firewall briefly configures wgclient1 zone, dnsmasq restarts, but daemon never launches

• Several user.warn : skip line without '=' warnings during toggle

Tested:

• 4.8.7 (factory): toggle silent, no VPN logs at all

• 4.8.5 (downgraded): toggle produces logs but interface still never created

• Clean reflash with Keep Settings unchecked between versions

Disclosure: unit is JD.com purchase, applied standard country_code mount-bind override to expose VPN UI. Reporting in case relevant.

Support ticket filed. Curious if this rings a bell for anyone — particularly the "firewall configures but daemon doesn't launch" pattern, or the skip-line-without-= warnings during toggle.

Thanks!

[xize11]

Vpn just works for me, both server and wgclient.

The binary also exists:

root@GL-MT3600BE:~# wg
interface: wgclient1
  public key: xxx
  private key: (hidden)
  listening port: 46488
  fwmark: 0x8000
peer: xxx
  preshared key: (hidden)
  endpoint: xxx:50128
  allowed ips: 0.0.0.0/0, ::/0
  latest handshake: 6 days, 22 hours, 8 minutes, 29 seconds ago
  transfer: 308.16 KiB received, 133.30 KiB sent
  persistent keepalive: every 25 seconds

What I don't really understand is the issue, half seem to be AI generated.

Do you have even a vpn dashboard menu on the ui?

If the awnser is no, then I think you have an CN version of this router, CN models don't have vpn features.

[linearkinetics]

Spot on—it’s a CN unit from JD.com. I used AI to format my first post just to keep the terminal logs and steps organized.

I’ve already tried the country_code mount-bind override to 'US' to expose the menus, but the services won't initialize (no wgclient1 interface). It seems the CN firmware lacks the actual binaries or has a deeper block regardless of the UI being visible. Any help or experience with getting the CN version VPN work would be greatly appreciated!

[admon]

Unfortunately, there is no support for CN firmware + VPN here.
If there is plain OpenWrt available for your device, you could try this one.

Support for UI + CN + VPN isn't given at this time due to legal reasons.