GL-MT1300 (Beryl) VPN Setup Help Please :(

So I’m still learning how to do that part. I have Bitvise and I am able to ssh into the router and use the “readlog” command. But I am not sure if that is the right way to do it or not.

You can get the System Log in SSH, run the logread command and select-copy-paste into Notepad, then look for the messages about disconnections. Post a section that shows them.

I was able to get Luci installed and used that.

I don’t see anything in the system logs mentioning disconnections. But the system log also isn’t refreshing?

Here is the last bit of them:

Wed Aug 24 19:35:31 2022 user.notice ucitrack: Setting up /etc/config/system reload dependency on /etc/config/dhcp
Wed Aug 24 19:35:33 2022 user.info mwan3rtmon[2798]: Detect rtchange event.
Wed Aug 24 19:35:33 2022 user.notice firewall: Reloading firewall due to ifup of wan (eth0.2)
Wed Aug 24 19:35:37 2022 daemon.err uhttpd[19241]: bind(): Address in use
Wed Aug 24 19:35:37 2022 daemon.err uhttpd[19241]: bind(): Address in use
Wed Aug 24 19:35:52 2022 user.info : The TCP Port 51820 Test OK
Wed Aug 24 19:35:52 2022 user.debug : ------ss-redir is not running!------
Wed Aug 24 19:35:56 2022 user.info mwan3rtmon[2798]: Detect rtchange event.

I can see the router flashing blue but if I refresh the logs, they are the exact same.

Never mind, it seems that it just takes a few minuets to refresh? Here are some more, it has defiantly been flashing blue since the logs in my last reply but I don’t see anything about disconnects.

Wed Aug 24 19:43:15 2022 kern.info kernel: [ 879.751199] mtk_soc_eth 1e100000.ethernet eth0: port 3 link down
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.923243] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.923243]
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.936670] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:45:41 2022 kern.warn kernel: [ 1025.940029] Start Seq = 00000000
Wed Aug 24 19:45:41 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPDISCOVER(br-lan) e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPOFFER(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPREQUEST(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:45:45 2022 daemon.info dnsmasq-dhcp[2818]: DHCPACK(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1 LAPTOP-F84GAUJU
Wed Aug 24 19:45:45 2022 kern.warn kernel: [ 1029.435909] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:45:45 2022 kern.warn kernel: [ 1029.439162] Start Seq = 00000002

Here are the logs for when it turns to flashing blue. This “flush 1” thing seems to show up a lot, as well as “start sequence”

Wed Aug 24 19:56:50 2022 kern.warn kernel: [ 1694.921155] 54, flush one!
Wed Aug 24 19:56:50 2022 kern.warn kernel: [ 1695.235584] 5b, flush one!
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.777021] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.777021]
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.791205] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.794484] Start Seq = 00000000
Wed Aug 24 19:57:22 2022 daemon.info dnsmasq-dhcp[2818]: DHCPREQUEST(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1
Wed Aug 24 19:57:22 2022 daemon.info dnsmasq-dhcp[2818]: DHCPACK(br-lan) 192.168.8.113 e8:2a:44:a1:67:b1 LAPTOP-F84GAUJU
Wed Aug 24 19:57:22 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.828634] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:22 2022 kern.warn kernel: [ 1726.831877] Start Seq = 00000002
Wed Aug 24 19:57:24 2022 kern.warn kernel: [ 1728.988814] 63, flush one!
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1759.884353] Replay Counter Different in pairwise msg 2 of 4-way handshake!
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.075536] AP SETKEYS DONE - AKMMap=WPA2PSK, PairwiseCipher=AES, GroupCipher=AES, wcid=1 from E8:2A:44:A1:67:B1
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.075536]
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.087426] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.090734] Start Seq = 00000003
Wed Aug 24 19:57:55 2022 user.notice mtk-wifi: new_station e8:2a:44:a1:67:b1 rax0
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.114596] Rcv Wcid(1) AddBAReq
Wed Aug 24 19:57:55 2022 kern.warn kernel: [ 1760.117889] Start Seq = 00000000

Some of the messages are referenced in this post:

Maybe worth to try the solution in the post to remove the saved repeater wifi SSID’s, now that you have WireGuard working with Ethernet cable only.

I removed the old Wi-Fi’s but it still does not work properly. It definitely only happens though when I have the vpn server running, stays solid white when it’s turned off.

Got any other potential solutions?
Or is there another router I can replace the server beryl with that will work with the client beryl?

It would be worth a complete reset of the router and then reconfigure it from scratch.

Maybe other readers may have ideas also.

Yeah I’ve tried that too. I may just go with another router. Any recommendations?

As you said you connect Beryl to your main router via cable, so it must be something wrong with the cable.

The cable is connected to wan (eth0.2) I think.

Maybe you can just change an cable.

I tried changing the cable and it made no difference. I have the cable in the WAN port of the beryl.

Some additional thoughts, to try to eliminate possibilities:

  1. Check if you get the same behaviour with the same WireGuard cconfig on a smartphone running one of the free WireGuard apps (to eliminate the Client Beryl).
  2. Switch the Ethernet WAN cable to a different port that is know to work on the Xfinity router and reboot the Xfinity (to eliminate the Xfinity).
  3. Switch the use of the two Beryl routers around, so the Client → Server and Server → Client (to eliminate the Server Beryl)
  1. It works on my phone, but what is weird is that as soon as I turn on the client router, the server one starts having problems. Even if I have the client VPN disabled as it turns on, it starts flashing blue.

  2. Switched ports and restarted router. No impact.

  3. The client one won’t even connect to the router the router via Ethernet, so maybe it has a problem.

I’m going to reset both to factory settings and see what happens.

Factory reseted both (held down button for 10 seconds) and the original client Beryl still cannot not even connect to my router via Ethernet. So send that one back I guess?

Update: I was on the phone with Amazon and they both started working properly.

VPN green and no disconnects. Not sure why it just decided to work all of a sudden.

I am a little hesitant to still rely on it though. Thoughts?

By the way, are both Beryl routers running the latest firmware?

Given the strange behaviours you have encountered, I would personally return for exchange at least the Client Beryl.

I don’t specifically own a Beryl, but I believe other Beryl owners are/have used them successfully with WireGuard. I have other GL.iNet routers that work successfully also, although sometimes I have to reboot them.

If you replace them with different router models, then you have to start the setup and testing from scratch and there is no guarantee that other problems will not arise. It depends on how much time and effort you can spend before you need to have everything working.

Never mind, they started disconnecting again. Pretty disappointed tbh. I’ll be getting replacements for both of them tomorrow morning and will test those out.

What does your setup look like? I’ve got about a month to figure this out but I’d liked to get it squared away way ahead of time.

My current main router behind the ISP cable modem/router is the Asus RT-AX88U running 3rd-party AsusWRT Merlin firmware. The Asus is super stable, has never crashed on me, and has integrated OpenVPN client/server. Previously, I also had the Asus RT-AC66U and RT-AC66U B1 models.

All 3 Asus routers do not have WireGuard, but OpenVPN is not a limitation for me because my ISP maximum upload speed is only 30Mbps. I only activate the OpenVPN server and port forwarding when I am away on travel, in order not to have open ports on the Internet more than necessary.

If I wanted to have WireGuard and/or had a much higher upload speed limit, I would consider the recently-released GL.iNet AXT1800 for WireGuard server.

Your AX88U should be getting built-in wireguard in the next few months. And if you are familiar with using third party scripts you can get wireguard up and running right now. I’m currently using WireGuard on my AC86U.

Update: Got 2 brand new Beryl routers. Set the server up and it is still dropping connectivity just on the smartphone test. Maybe it’s my ISP? Pretty frustrated at this point. Thoughts?