Can't connect GL-SFT1200 to WireGuard-Client

Since I am not sure what you are trying to do: Connecting to a server which is using VPN as well is mostly not successful. You need to draw (draw.io) your network topology for better understanding.

Can you provide error messages or something like that? But the problem could be your VPN at home as well.

First of all, thank you @admon very much for your support and help in solving the problem.

As mentioned, the WireGuard connection works via iOS and macOS from network A. The GL-SFT1200 (network GL) is connected to network A via a modem router to have internet access. When I am in network GL, I cannot establish a WireGuard connection even with the macOS app. Thank you for your approach, I think we need to find the solution here?

First make sure SFT1200 is not in the same network as the Fritzbox.
Second, in the wireguard config, pls remove the “fritz.box” from the dns

Unfortunately, removing fritz.box didn’t help. Still get the VPN failed to connect error.

The IP of the router in the external network (10 miles away) I am trying to connect with, is 192.168.178.1

latest config lines

[Interface]
PrivateKey = HIDDEN
Address = 192.168.178.202/24
DNS = 192.168.178.1

[Peer]
PublicKey = HIDDEN
PresharedKey = HIDDEN
AllowedIPs = 192.168.178.0/24,0.0.0.0/0
Endpoint = domain.myfritz.net:59024
PersistentKeepalive = 25

Removing the 192.168.178.0/24 from AllowedIPs = 192.168.178.0/24,0.0.0.0/0 didn’t help either.

And the internal IP of the router you are trying to connect from isn’t in 192.168.178.x I hope?
(None of the internal address. Not even guest network)

The IP of the router of network A (WLAN-2…) is 192.168.2.1. I can connect from WLAN-2… with WireGuard iOS and macOS app successfully. The GL-SFT1200 (network GL) router, the one that does not connect with WireGuard has the IP 192.168.2.128.

Thanks again so much for your support!

Won’t work.

The network isn’t allowed to overlap.
Change the network of the GL one to something different than 192.168.2.x

You mean change the 128 from the router IP from 192.168.2.128 to anything else?

I am not sure if you understood my correctly.

You can’t connect to a VPN from within the network you want to connect to.
So when using VPN all networks need to be unique.


Consider to use draw.io to draw a small map of your network, like explained here.

Thanks for your patience. Hope this helps?

What are the IPs of …

  • Router Network A
  • GL-SFT1200
  • Office internal

Router Network A

CleanShot 2024-03-01 at 20.29.22

GL-SFT1200

CleanShot 2024-03-01 at 20.30.21

Office

CleanShot 2024-03-01 at 20.31.07

We have supported many Fritzbox users.

Can you just contact us via email support at glinet.biz and we will help to check.

thank you, did so. hope you can help me solving this.

Just an update, the issue is related to ipv6.

The ddns is only resolved as ipv6 only here. This definately will be a problem. Still checking.

Maybe it’s dual stack lite? Very common in Germany, for example, with cheap contracts.
Dual stack lite means there is CGNAT on the IPv4 and only IPv6 can have incoming ports.

See: Dual Stack Lite (DS-Lite / DSlite) (Translated by Google)

Don’t know how does the Fritzbox ddns work. At least it will resolve as both ipv4 and ipv6, no?

No, because in dual stack lite you will have IPv4 tunneled over IPv6.
See my link above.