GL-E5800 (Mudi 7) 4.10.0 – WireGuard client tunnel IP conflicts with new network interface (wlan4), fixed by downgrade

Hi all,

After updating my Mudi 7 to firmware 4.10.0, my WireGuard client connection to my FritzBox (single-device VPN) stopped working correctly. The router reported:

Primary Tunnel IP Address (192.168.0.102/24) is in conflict with wlan4.

My main LAN is 192.168.8.x and my guest network is 192.168.9.x, so this wasn't a config I set myself — it looks like an interface (wlan4) came up with a 192.168.0.0/24 subnet after the update, which collided with the WireGuard tunnel address assigned by my FritzBox.

I did a full factory reset, and the exact same conflict reappeared — so this seems to be a default introduced by the update itself, not a leftover config issue.

Looking at the 4.10.0 release notes, I suspect this is related to the "Subnet: Refines subnet management to streamline the centralized configuration of main and guest network parameters" change, combined with the new "proactive IP and DNS conflict detection" for VPN — possibly the underlying overlap existed before too, but wasn't actively flagged/blocked until this release.

Fix: I downgraded back to firmware V4.8.5, and the WireGuard connection works again without any changes on my end.

Posting this in case others hit the same issue after updating to 4.10.0 — and so GL.iNet support can take a look at the wlan4 subnet default.

Device: GL-E5800 (Mudi 7)
Firmware: 4.10.0 → downgraded to V4.8.5

I’m sorry but this firmware seems to be broken. The screen wouldn’t light up after resetting the device. I couldn't turn the screen on at all. I didn’t observe the pattern but it was alarming when i saw the wifi on (on my phone) and no screen to disable it. This is a huge security issue with regards to close quarters threats, when one is expecting the screen to function predictably. I promptly reverted to previous firmware.

It occurred to me might your firmware webpage have been hacked? The checksum matches with the firmware I downloaded.

Hi,

We tested a similar WireGuard configuration on a Mudi 7 running firmware 4.10.0, using 192.168.0.102/24 as the WireGuard interface address, but we have not been able to reproduce the conflict with wlan4 warning.

Could you please let us know how the Mudi 7 was connected to the Internet when the issue occurred — Cellular, Ethernet, or Repeater?
If Ethernet was using DHCP, could you please also let us know the IP address/subnet and gateway assigned to the Mudi 7 by the upstream router.

If convenient, when the issue occurs again on firmware 4.10.0, could you please run the following commands and share the output with us?

ip -4 addr
iw dev
bridge link show

Thank you for your support and understanding.

1 Like

Hi,

Thanks for looking into this. To answer your questions:

Connection type: The Mudi 7 was connected as a repeater within my home network (connecting to my FritzBox's Wi-Fi as the upstream).

VPN setup: The WireGuard server was the FritzBox itself, using its "connect single device" feature — so the VPN client (Mudi 7) and the VPN server (FritzBox) were in the same home network, not connecting from an external network.

I'm currently on vacation, but I could update back to 4.10.0 afterwards to reproduce the issue and provide the ip -4 addr, iw dev, and bridge link show output then.

Thanks,
René

Hi,

We checked the GL.iNet Download Center and were able to download the Mudi 7 firmware normally, and the firmware upgrade also completed successfully on our test device.

The firmware file we downloaded and tested is:

e5800-4.10.0_release5-1092-0825-1787643675.zip

After the upgrade, the firmware information on our device is shown below.


Could you please let us know how you performed the firmware upgrade when the issue occurred?

If convenient, could you please try upgrading to this firmware once again and let us know whether the screen issue can still be reproduced?

I am running into a similar issues as this, but on wan3. I am using the Mudi 7 as a repeater on a hotel guest network and am unable to connect to my VPN. Both my wireguard home vpn and protonvpn. I used the admin page to upgrade to the latest firmware and just now also installed the latest firmware from the linked above page. Both ways I get this error message:

Primary Tunnel IP Address (10.2.0.2/32) conflicts with the wlan3

root@GL-E5800:~# ip -4 addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
13: eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
inet 169.254.22.1/24 brd 169.254.22.255 scope global eth0
valid_lft forever preferred_lft forever
22: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br-lan state UP group default qlen 3000
inet 169.254.24.1/24 brd 169.254.24.255 scope global wlan0
valid_lft forever preferred_lft forever
24: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br-lan state UP group default qlen 3000
inet 169.254.25.1/24 brd 169.254.25.255 scope global wlan1
valid_lft forever preferred_lft forever
25: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
inet 192.168.8.1/24 brd 192.168.8.255 scope global br-lan
valid_lft forever preferred_lft forever
26: rndis0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast master br-lan state DOWN group default qlen 1000
inet 169.254.20.1/24 brd 169.254.20.255 scope global rndis0
valid_lft forever preferred_lft forever
35: wlan3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 3000
inet 10.62.150.177/8 brd 10.255.255.255 scope global wlan3
valid_lft forever preferred_lft forever

root@GL-E5800:~# iw dev
phy#0
Interface wlan3
ifindex 35
wdev 0x4
addr
ssid
type managed
channel 1 (2412 MHz), width: 20 MHz, center1: 2412 MHz
txpower 22.00 dBm
Interface wlan1
ifindex 24
wdev 0x3
addr
ssid
type AP
channel 44 (5220 MHz), width: 80 MHz, center1: 5210 MHz
txpower 30.00 dBm
Interface wlan0
ifindex 22
wdev 0x1
addr
ssid <my-2.4ghz-ssid>
type AP
channel 1 (2412 MHz), width: 20 MHz (no HT), center1: 2412 MHz
txpower 30.00 dBm

root@GL-E5800:~# bridge link
22: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br-lan state forwarding priority 32 cost 100
24: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br-lan state forwarding priority 32 cost 100
26: rndis0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 master br-lan state disabled priority 32 cost 100

Edit: Downgrading to firmware 4.8.5 works fine, I am able to turn on my VPN. Seems to be an issue with the latest firmware 4.10.0

1 Like