I’m trying to establish a Wireguard connection from my Opal router to the Fritzbox, in order to be able to access the internet as from the Fritzbox.
Opal is connected to the internet via a mobile doing hotspot over 5Ghz.
FB is the server, and I am trying to use the Opal as an agent.
This is the config file that I get from the FB:
[Interface]
PrivateKey = [PK here]
Address = 192.168.8.1/24 <-- Opal's internal network
DNS = 192.168.178.1 <-- FBs gateway
DNS = fritz.box <-- I remove this before pasting
[Peer]
PublicKey = [PK]
PresharedKey = [PSK]
AllowedIPs = 192.168.178.0/24 <-- FBs LAN
Endpoint = [ID].myfritz.net:[port]
PersistentKeepalive = 25
My provider supports both IPv4 and IPv6, and I have tested to disabled the v6, with no success.
Connecting to the FB via a single client works fine, but pasting the above config to the Wireguard client in Opal leaves the connection with a orange button.
Any suggestions?
EDIT: Checked again. Disabling IPv6 in the routers is completely blocking the access from the outside.
It looks like the provider is using DS-lite.
Thanks @hansome , I eventually made this work, after tweaking some IPv6 settings, and installing all the needed ipv6 packages.
It is connecting and working fine now.
The main problem that I am facing is that my Fritzbox is loosing it’s cgnat binding, probably after some period of inactivity, and after that, it is impossible to connect to it.
Can you suggest any workarounds for it? Probably something that pings or sends http requests to the endpoint maybe?
With the parameter “PersistentKeepalive”, there’s already traffic to make it active. Even without keepalive, wireguard will exchange keys for not very long time.
So it could be other issues.
Do you mean install ipv6 packages on SFT1200?
If you can give more details about your setting, I can test it with my Fritzbox 7530.
@hansome yes, I installed 6to4, 6in4, and 6rd packages on SFT1200, and also enabled IPv6.
However, I’m afraid that you are right and it is something else indeed.
I am using the Fritzbox provided “Internet Access” service, that is supposed to give access to the endpoint that I put in Interface configurations: Endpoint = [ID].myfritz.net:[port]
However, since the Fritzbox is sitting behind a CGNAT, it never provides a valid IPv4 to this endpoint, and the tunnel is always established over the IPv6. This seems to be the reason why I can’t connect to it when I am in IPv4 only networks, or when I disable IPv6 in the SFT1200.
This turns this in a major blocker, as I was planning to use the SFT1200 to connect from IPv4 only networks. Any suggestions of proven solutions about this?
