Flint3 wgclient Nordvpn fail

Gergnu · January 24, 2026, 1:31am

Hi,

I’m trying to connect to NordVPN, but it doesn’t connect and I get that error. The indicator light stays yellow, but it never actually connects — it never turns green. I deleted everything and reinstalled the NordVPN credentials, but the same issue keeps happening. Thank you.

Awaiting for your comment.

Fri Jan 23 22:26:12 2026 daemon.notice netifd: Interface 'wgclient1' is setting up now
Fri Jan 23 22:26:12 2026 daemon.notice netifd: wgclient1 (406): Line unrecognized: `PrivateKey=' 
Fri Jan 23 22:26:12 2026 daemon.notice netifd: wgclient1 (406): Configuration parsing error 
Fri Jan 23 22:26:19 2026 daemon.notice netifd: wgclient1 (1250): udp      17 59 src=192.168.9.118 dst=192.168.9.1 sport=38065 dport=53 packets=1 bytes=71 [UNREPLIED] src=192.168.9.1 dst=192.168.9.118 sport=2153 dport=38065 packets=0 bytes=0 mark=4096 use=1 
Fri Jan 23 22:26:19 2026 daemon.notice netifd: wgclient1 (1250): udp      17 59 src=192.168.9.118 dst=192.168.9.1 sport=53220 dport=53 packets=2 bytes=134 [UNREPLIED] src=192.168.9.1 dst=192.168.9.118 sport=2153 dport=53220 packets=0 bytes=0 mark=4096 use=1 
Fri Jan 23 22:26:19 2026 daemon.warn dnsmasq[1]: no servers found in /tmp/resolv.conf.d/resolv.conf.wgclient1, will retry 
Fri Jan 23 22:26:19 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.wgclient1 - 6 names 
Fri Jan 23 22:26:19 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.wgclient1 - 6 names Fri Jan 23 22:26:19 2026 daemon.notice netifd: Interface 'wgclient1' is now down 
Fri Jan 23 22:26:19 2026 daemon.notice netifd: Interface 'wgclient1' is setting up now 
Fri Jan 23 22:26:19 2026 daemon.notice netifd: wgclient1 (1910): Line unrecognized: `PrivateKey='
Fri Jan 23 22:26:19 2026 daemon.notice netifd: wgclient1 (1910): Configuration parsing error
Fri Jan 23 22:26:26 2026 daemon.notice netifd: Interface 'wgclient1' is now down
Fri Jan 23 22:26:26 2026 daemon.notice netifd: Interface 'wgclient1' is setting up now
Fri Jan 23 22:26:27 2026 daemon.notice netifd: wgclient1 (3246): Line unrecognized: `PrivateKey=' Fri Jan 23 22:26:27 2026 daemon.notice netifd: wgclient1 (3246): Configuration parsing error Fri Jan 23 22:26:34 2026 daemon.notice netifd: Interface 'wgclient1' is now down Fri Jan 23 22:26:34 2026 daemon.notice netifd: Interface 'wgclient1' is setting up now Fri Jan 23 22:26:34 2026 daemon.notice netifd: wgclient1 (4201): Line unrecognized: `PrivateKey='
Fri Jan 23 22:26:34 2026 daemon.notice netifd: wgclient1 (4201): Configuration parsing error

admon · January 24, 2026, 9:26am

Please post the output of one of your WireGuard profiles. (Minus the keys, pls)
It seems that there is an issue with the PrivateKey= line.

It should look like that:

[Interface]
Address = 10.5.0.2/16
PrivateKey = xxxxxxxx=
DNS = 103.86.96.100
MTU = 1350

[Peer]
AllowedIPs = 0.0.0.0/0
Endpoint = frankfurt.de.wg.nordhold.net:51820
PersistentKeepalive = 25
PublicKey = xxxxxxxxxxxx=

Gergnu · January 24, 2026, 11:44am

Hi admon,
Thank you very much for the quick response and for taking the time to look into this.
After further troubleshooting on my Flint3 running firmware 4.8.3, I can confirm the following:
wgclient1 is created correctly and points to config='peer_2000'
There is no peer_2000 section under /etc/config/network
There is no WireGuard client profile generated at all, neither in /etc nor in /tmp
Searching the entire system, the only PrivateKey present is for wgserver, not for the WG client:
Copy code

/tmp/wireguard/wgserver:PrivateKey=...
No runtime .conf for the WireGuard client is ever created
Because of this, it looks like on firmware 4.8.3 the automatic WireGuard client generator for NordVPN fails to inject or generate the client PrivateKey, so netifd ends up trying to parse an incomplete configuration and throws the error related to the PrivateKey line. The LED remains yellow and the tunnel never comes up.
Thanks again for your help and for the fast feedback — it’s really appreciated.
Best regards,
Germán

admon · January 24, 2026, 12:05pm

Please run uci show | grep wireguard.peer_2000 via SSH on the router. It should print the config. The file should be /etc/config/wireguard

In the meantime, you can use https://nordvpn-config.admon.me to download the WireGuard NordVPN config you would like to use.

Gergnu · January 24, 2026, 1:06pm

Hi admon,

Thank you very much for the quick response.

I ran the command via SSH on the router as requested. Here is the output:

Copy code

root@GL-BE9300:~# uci show | grep wireguard.peer_2000

wireguard.peer_2000=peers

wireguard.peer_2000.mtu='1350'

wireguard.peer_2000.masq='1'

wireguard.peer_2000.local_access='0'

wireguard.peer_2000.name='ar55.nordvpn.com'

wireguard.peer_2000.host_id='994955'

wireguard.peer_2000.group_id='10004'

wireguard.peer_2000.location='Argentina,Buenos Aires'

root@GL-BE9300:~#

Please let me know if you need me to share any additional output or logs.

Thanks again for the fast feedback and support.

Best regards,

Germán

admon · January 24, 2026, 3:26pm

So there are no entries like these?

wireguard.peer_2000.private_key='xxxx'
wireguard.peer_2000.public_key='xxxx'

You followed this manual, I guess?

system · April 25, 2026, 3:56am

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.