GL.iNet Beryl 7 / GL-MT3600BE: AmneziaWG 2.0 profile failed to apply

Router VPN, DNS, Leaks
1

Hi everyone,

I’m trying to set up AmneziaWG 2.0 on a GL.iNet Beryl 7 / GL-MT3600BE router.

Firmware: GL.iNet 4.9
Router model: Beryl 7 / GL-MT3600BE
OpenWrt shown in SSH: OpenWrt 21.02-SNAPSHOT
AmneziaWG tool exists on the router:

which awg
/usr/bin/awg

awg --version
amneziawg-tools v1.0.20210914 - https://amnezia.org

The problem is with importing an AmneziaWG 2.0 client configuration into the GL.iNet web UI.

I go to:

VPN Dashboard / VPN Client / WireGuard / Add Profile / Upload Configuration

The file uploads successfully, but after clicking Apply it shows only:

Failed

No detailed error is shown in the web UI.

My config is an AmneziaWG 2.0 config and contains these parameters:

Jc
Jmin
Jmax
S1
S2
S3
S4
H1
H2
H3
H4
I1
I2
I3
I4
I5

I specifically need AmneziaWG 2.0 support. AmneziaWG 1.0-compatible configs are not suitable for my use case.

I also tried editing/removing the suspicious I1 line format, but the profile still fails to apply. The web UI either does not accept the config or fails after upload.

Questions:

  1. Does GL.iNet firmware 4.9 on Beryl 7 / GL-MT3600BE fully support AmneziaWG 2.0 client configs with I1-I5?
  2. Is the GL.iNet web UI currently unable to parse some valid AmneziaWG 2.0 config formats?
  3. Is there a working way to import or manually configure AmneziaWG 2.0 via SSH on this firmware?
  4. Since awg exists but awg-quick does not, what is the correct manual setup method on GL.iNet firmware?
  5. Where does GL.iNet store WireGuard/AmneziaWG client profiles, so I can check or edit the generated config manually?

Thanks.

How do use Amnezia WG in the latest snapshots?
2

Hi,

Please refer to our reply below:

  1. We tested locally using MT3600BE v4.9.0 beta2, and it seems that an AWG 2.0 configuration file with the I1–I5 parameters can be loaded and used normally:

image690x467
image690x4671278×865 43.6 KB

image690x459
image690x4591350×899 38.5 KB

  1. Please refer to our documentation to learn more about the current support status for AWG parameters:
    AmneziaWG Obfuscation - GL.iNet Router Docs 4

3, 4, and 5.
You can SSH into the router and then modify the files under /etc/wireguard/profile/ to adjust the AWG parameters:

image690x302
image690x3021224×537 15.1 KB

After that, you can enable it directly from the web interface.

Slate 7 Pro Wireguard
4

That helped! Thank you very much!

1 Like
6

I had the same problem with applying AmneziaWG config to Beryl 7 as a client.

I had two different configs - one would work just fine, another would drop the S4 from the list while importing and failed to connect afterwards. Editing via UI would not allow me to insert the S4, weird, definitely a bug.

I used the above direct edit suggestion and injected the S4 directly and it started connecting.

7

Hi,

Could you please share the AmneziaWG profile that is not working properly with us so we can check it?

You can hide sensitive information such as the server address and public/private keys, or send the profile to us via private message.

image
image632×233 19.1 KB