Beryl (GL-MT1300) bug on firmware 3.211, WireGuard Client configuration

[sta]

Hello Technical Support,

I am using the Beryl (GL-MT1300) router and encountered an issue with manually adding a WireGuard Client on firmware 3.211. I have successfully reproduced the behaviour and found a workaround.

What happens is that when I manually added a WireGuard Client by copy/paste in the config, it is able to save and is accepted.

Then when I click on the Mangement tab to view the tunnel’s configuration, I see in the Interface IP Address field, it has put my IP address (from the copy/paste) and added “,MTU”. What it looks like is:

Interface
IP Address 10.6.0.3/24,MTU

I discovered this by trying to troubleshoot why the tunnel wasn’t coming up and clicking modify to look at the config. After not changing anything, I clicked Apply and it gave me a message that the IP Address was invalid. That was when I noticed the extra “,MTU” in the IP Address field.

By manually removing “,MTU”, it solved the problem right away and my tunnel came up.

Let me know if you need more detail.

Thanks,
S

[alzhao]

Can you post the wireguard content? Just mark your keys.

Maybe it is because of format differences.

[sta]

Hello @alzhao,

Here is my WireGuard content from the .conf file. I used Windows notepad to view and copy the data into the WireGuard setup screen. I am using Chrome Version 102.0.5005.63 (Official Build) (64-bit).

[Interface]
PrivateKey = REMOVED
Address = 10.6.0.3/24
MTU = 1420
DNS = 10.6.0.1

[Peer]
PublicKey = REMOVED
PresharedKey = REMOVED
Endpoint = REMOVED:51820
AllowedIPs = 0.0.0.0/0, ::0/0

[wcs2228]

This looks like a variation of previously-reported WireGuard config parsing problems, where the “MTU =” line gets partially appended to the previously line (the “MTU” characters):

GL-MV1000 Brume 3.211 beta4: Wireguard IPv6 broken

Two issues I encountered in 3.203 and wanted to test if they are resolved in 3.211 beta4: Pasting in a Wireguard client .conf That has an MTU= line, it will parse it wrong and instead of filtering it out or using the value, it puts it into the DNS server field instead If a Wireguard .conf has IPv6 GUA it will do bad input validation and claim the address is not valid. These are valid, working profiles that are fine in Android, Linux, Windows, MacOS wg client. Example config with docum…

GL-AR300M Wireguard Client

GL-AR300M Firmware Version 3.201 My pivpn config looked like [Interface] PrivateKey = xxx Address = 10.6.0.3/24 MTU = 1420 [Peer] PublicKey = xxx PresharedKey = xxx Endpoint = xxx:51820 AllowedIPs = 0.0.0.0/0, ::0/0 I had to enter a „new line“ after line „ Address =“ and before „MTU =“. With this minor change, I was able to import config file in the text-field!

As a workaround, you can try adding a newline before the “MTU =” line in the config file, so the setting is preserved.

I do not work for and I am not directly associated with GL.iNet

[alzhao]

I think it is a bug in old firmware.

The current 3.215 beta has fixed that. I used your fortmat and it parse OK.

[sta]

Thanks @alzhao. Do you recommend running the beta firmware then? Is it stable enough to be considered “stable”?

[alzhao]

Cannot sure 100% stable before it is released.

But I tested and the format can be parsed correctly in snapshot.