Cannot connect to WireGuard server on MT2500 (Brume 2)

qwerty12345 · 2023-06-20T18:40:50.852Z

Greetings,

I am trying to set up a home VPN server using WireGuard protocol. I managed to do this using AR300M mini-router, after setting up static IP and port forwarding on my main router. I tested the setup using WireGuard app on my Android phone and it all works well.

Being very happy and excied it worked with AR300M, I ordred MT2500 (Brume 2) which supports much higher speeds. I repeated the exact same steps as for setting up AR300M:

Connect Brume’s WAN port into main router’s LAN port.
Give Brume 2 static IP address.
Set up TCP/UDP port 51820 forwarding to Brume 2.
Start a WireGuard server on Brume 2.
Create a new WG client configuration and load it on the Adroid phone via QR code.
Attempt to connect to the WireGuard server from the phone. This step fails as there is no response from the server.

The main difference between AR300M and MT2500 seems to be the firmware version - 3.x versus 4.x. Can you kindly provide some advice why this would work on 3.x but does not work on 4.x?

wcs2228 · 2023-06-21T02:22:13.448Z

Did you set up DDNS also?

I do not work for and I am not directly associated with GL.iNet

qwerty12345 · 2023-06-21T07:15:02.024Z

Yes, but DDNS is set up on the main router. I did not set up DDNS on Brume 2 explicitly because it is not connected to the internet directly. This setup already works for AR300M.

alzhao · 2023-06-21T07:26:41.974Z

The setup process is exactly the same as AR300M.

There are two common problems but seems you didn’t have

port forward should use UDP, not TCP. TCP/UDP should also work ok
don’t change 51820 if you don’t need to.

qwerty12345 · 2023-06-21T11:06:25.062Z

I am forwarding port 51820 for TCP/UDP, so that should not be the issue.

qwerty12345 · 2023-06-21T13:27:53.443Z

I managed to resolve it - it was port forwarding issue after all. I still had port forwarding enabled for AR300M, so there was a cinflict since port 51820 was configured for forwarding to both AR300M and MT2500, which cannot be done. After changing the WG server port to a different one on MT2500 and forwarding that one instead, the server started working.

Thanks everyone for help!