GL-MT1300 (Beryl) VPN Setup Help Please :(

I bought two Beryl routers to setup a wireguard VPN. The Beryl that acts as the server flashes blue way too much. I have it connected to my xfinity gateway via ethernet. The VPN itself works but it is quite slow. When the Beryl flashes blue, it only does it for a few seconds and then goes back to solid white. It then stays solid white for maybe a minute and then goes back to flashing blue.

Am I supposed to have the wifi repeater on if I already have it connected to the router via ethernet? That is the only way the vpn works.

It is very important that this works for me while I am traveling with the client Beryl. Any advice on what’s going on here?

Do you have the Xfinity gateway port forwarding VPN port to the Beryl wifi repeater IP address? It should port forward to the Beryl ethernet WAN IP address. You should only need the Ethernet cable connection to the Xfinity gateway, not the wifi also.

If you are using OpenVPN, then it is not so fast on the Beryl. The speed may also be limited by your ISP outbound/upload spped limit.

I do not work for and I do not have formal association with GL.iNet

I have it forwarded to the port. Here is what it looks like on the Xfinity end. I am using WireGuard.

Xfinity gateway port forward - Album on Imgur

So on the Xfintiy app it says reserved IP address 10.0.0.92

But the IP address of the WireGuard server is 10.0.0.1

Could this be part of the problem?

WireGuard server

Xfinity

Ok I got it to work without using the wifi on the server end. I just had to reset the vpn on the client side. But the server beyrl is still constantly dropping connection and flashing blue. It stays white for maybe a minute and then goes to flashing blue.

Can you post the portion of the System Log that shows the disconnections?

So I’m still learning how to do that part. I have Bitvise and I am able to ssh into the router and use the “readlog” command. But I am not sure if that is the right way to do it or not.

You can get the System Log in SSH, run the logread command and select-copy-paste into Notepad, then look for the messages about disconnections. Post a section that shows them.

I was able to get Luci installed and used that.

I don’t see anything in the system logs mentioning disconnections. But the system log also isn’t refreshing?

Here is the last bit of them:

Wed Aug 24 19:35:31 2022 user.notice ucitrack: Setting up /etc/config/system reload dependency on /etc/config/dhcp
Wed Aug 24 19:35:33 2022 user.info mwan3rtmon[2798]: Detect rtchange event.
Wed Aug 24 19:35:33 2022 user.notice firewall: Reloading firewall due to ifup of wan (eth0.2)
Wed Aug 24 19:35:37 2022 daemon.err uhttpd[19241]: bind(): Address in use
Wed Aug 24 19:35:37 2022 daemon.err uhttpd[19241]: bind(): Address in use
Wed Aug 24 19:35:52 2022 user.info : The TCP Port 51820 Test OK
Wed Aug 24 19:35:52 2022 user.debug : ------ss-redir is not running!------
Wed Aug 24 19:35:56 2022 user.info mwan3rtmon[2798]: Detect rtchange event.

I can see the router flashing blue but if I refresh the logs, they are the exact same.

Never mind, it seems that it just takes a few minuets to refresh? Here are some more, it has defiantly been flashing blue since the logs in my last reply but I don’t see anything about disconnects.

Wed Aug 24 19:43:15 2022 kern.info kernel: [ 879.751199] mtk_soc_eth 1e100000.ethernet eth0: port 3 link down
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.923243] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.923243]
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.936670] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.940029] Start Seq = 00000000
Wed Aug 24 19:45:41 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPDISCOVER(br-lan) e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPOFFER(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPREQUEST(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPACK(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1 LAPTOP-F84GAUJU
Wed Aug 24 19:45:45 2022 kern.warn kernel: [ 1029.435909] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:45:45 2022 kern.warn kernel: [ 1029.439162] Start Seq = 00000002

Here are the logs for when it turns to flashing blue. This “flush 1” thing seems to show up a lot, as well as “start sequence”

Wed Aug 24 19:56:50 2022 kern.warn kernel: [ 1694.921155] 54, flush one!
Wed Aug 24 19:56:50 2022 kern.warn kernel: [ 1695.235584] 5b, flush one!
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.777021] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.777021]
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.791205] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.794484] Start Seq = 00000000
Wed Aug 24 19:57:22 2022 daemon.info dnsmasq-dhcp[2818]: DHCPREQUEST(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:57:22 2022 daemon.info dnsmasq-dhcp[2818]: DHCPACK(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1 LAPTOP-F84GAUJU
Wed Aug 24 19:57:22 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.828634] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.831877] Start Seq = 00000002
Wed Aug 24 19:57:24 2022 kern.warn kernel: [ 1728.988814] 63, flush one!
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1759.884353] Replay Counter Different in pairwise msg 2 of 4-way handshake!
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.075536] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.075536]
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.087426] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.090734] Start Seq = 00000003
Wed Aug 24 19:57:55 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.114596] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.117889] Start Seq = 00000000

Some of the messages are referenced in this post:

Maybe worth to try the solution in the post to remove the saved repeater wifi SSID’s, now that you have WireGuard working with Ethernet cable only.

I removed the old Wi-Fi’s but it still does not work properly. It definitely only happens though when I have the vpn server running, stays solid white when it’s turned off.

Got any other potential solutions?
Or is there another router I can replace the server beryl with that will work with the client beryl?

It would be worth a complete reset of the router and then reconfigure it from scratch.

Maybe other readers may have ideas also.

Yeah I’ve tried that too. I may just go with another router. Any recommendations?

As you said you connect Beryl to your main router via cable, so it must be something wrong with the cable.

The cable is connected to wan (eth0.2) I think.

Maybe you can just change an cable.

I tried changing the cable and it made no difference. I have the cable in the WAN port of the beryl.

Some additional thoughts, to try to eliminate possibilities:

  1. Check if you get the same behaviour with the same WireGuard cconfig on a smartphone running one of the free WireGuard apps (to eliminate the Client Beryl).
  2. Switch the Ethernet WAN cable to a different port that is know to work on the Xfinity router and reboot the Xfinity (to eliminate the Xfinity).
  3. Switch the use of the two Beryl routers around, so the Client → Server and Server → Client (to eliminate the Server Beryl)
  1. It works on my phone, but what is weird is that as soon as I turn on the client router, the server one starts having problems. Even if I have the client VPN disabled as it turns on, it starts flashing blue.

  2. Switched ports and restarted router. No impact.

  3. The client one won’t even connect to the router the router via Ethernet, so maybe it has a problem.

I’m going to reset both to factory settings and see what happens.

Factory reseted both (held down button for 10 seconds) and the original client Beryl still cannot not even connect to my router via Ethernet. So send that one back I guess?