MT-3000 Sudden VPN issue

Routers VPN, DNS, Leaks
1

MT-3000 was running great, connecting to WG server, until today. Nothing has changed but now it won't connect anymore. Here is the Log:

Connection Log

Wed Aug 27 22:33.38 2025 daemon warn

dnsmasq[7553]: O servers found in /tmp/
resolv.conf.d/resolv.conf.wgclient1, will retry
Wed Aug 27 22:33:38 2025 daemon.info
insmasq[7553]: read /tmp/hosts/
dhcp.wgclient1 -3 addresses
Wed Aug 27 22:33:38 2025 daemon.info
dnsmasq[7554]: read /tmp/hosts/
hcp.wgclient1-3 addresses
Wed Aug 21 22:33:40 2025 daemon.warn
dnsmasq[8529]: no servers found in /tmp/
C
esolv.conf.d/resolv.conf.wgclient1, will retry
Wed Aug '2 21 22:33:40 2025 daemon.info
dnsmasq[8529]: read /tmp/hosts/
dhcp.wgclient1-3 addresses
Wed Aug 27 22:33:40 2025 daemon info
dnsmasq[8528]: read /tmp/hosts/
dhcp.wgclient1-3 addresses
Wed Aug 27 22.33:46 2025 daemon.notice
procd: /etc/rc.d/S95vpn-client: Found
matching instance wgclient1 for rule peer:
2002
Wed Aug 27 22:33:46 2025 daemon.notice
procd: /etc/rc.d/S95vpn-client: Starting
instance wgclient1 (has enabled rules)
Wed Aug 27 22:33:48 2025 daemon.warn

I am still able to connect to the WG server from my mobile phone and laptop but MT-3000 won't connect anymore.
I have noticed new update pending, installed it (now it is 4.8.1), rebooted router and still cannot connect.

Can you please help me to get back the VPN functionality?

2

The interesting log lines are missing, could you export the whole log?

3

inb4 DDNS.

4

Here is the full log:

Thu Aug 28 05:08:20 2025 daemon.notice netifd: Interface 'wgclient1' is now down
Thu Aug 28 05:08:20 2025 daemon.notice netifd: Interface 'wgclient1' is setting up now
Thu Aug 28 05:08:20 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient1 ()
Thu Aug 28 05:10:06 2025 user.notice wireguard-debug: USER=root ifname=wgclient1 ACTION=REKEY-GIVEUP SHLVL=1 HOME=/ HOTPLUG_TYPE=wireguard LOGNAME=root DEVICENAME= TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin PWD=/
Thu Aug 28 05:10:07 2025 daemon.notice netifd: wgclient1 (10226): udp 17 59 src=192.168.8.119 dst=192.168.8.1 sport=37170 dport=53 packets=1 bytes=75 src=192.168.8.1 dst=192.168.8.119 sport=2153 dport=37170 packets=1 bytes=75 mark=4096 zone=4096 use=1
Thu Aug 28 05:10:07 2025 daemon.notice netifd: wgclient1 (10226): udp 17 59 src=192.168.8.119 dst=192.168.8.1 sport=19883 dport=53 packets=2 bytes=158 src=192.168.8.1 dst=192.168.8.119 sport=2153 dport=19883 packets=2 bytes=158 mark=4096 zone=4096 use=1
Thu Aug 28 05:10:07 2025 daemon.notice netifd: wgclient1 (10226): udp 17 59 src=192.168.8.119 dst=192.168.8.1 sport=37170 dport=53 packets=1 bytes=75 src=192.168.8.1 dst=192.168.8.119 sport=2153 dport=37170 packets=1 bytes=75 mark=4096 zone=4096 use=1
Thu Aug 28 05:10:07 2025 daemon.notice netifd: wgclient1 (10226): udp 17 59 src=192.168.8.112 dst=192.168.8.1 sport=16018 dport=53 packets=2 bytes=130 src=192.168.8.1 dst=192.168.8.112 sport=2153 dport=16018 packets=2 bytes=130 mark=4096 zone=4096 use=1
Thu Aug 28 05:10:07 2025 daemon.notice netifd: wgclient1 (10226): udp 17 59 src=192.168.8.112 dst=192.168.8.1 sport=45530 dport=53 packets=2 bytes=122 src=192.168.8.1 dst=192.168.8.112 sport=2153 dport=45530 packets=2 bytes=122 mark=4096 zone=4096 use=1
Thu Aug 28 05:10:07 2025 daemon.notice netifd: Interface 'wgclient1' is now down
Thu Aug 28 05:10:07 2025 daemon.notice netifd: Interface 'wgclient1' is setting up now
Thu Aug 28 05:10:08 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient1 ()
Thu Aug 28 05:11:53 2025 user.notice wireguard-debug: USER=root ifname=wgclient1 ACTION=REKEY-GIVEUP SHLVL=1 HOME=/ HOTPLUG_TYPE=wireguard LOGNAME=root DEVICENAME= TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin PWD=/
Thu Aug 28 05:11:55 2025 daemon.notice netifd: wgclient1 (12410): udp 17 59 src=192.168.8.112 dst=192.168.8.1 sport=10187 dport=53 packets=2 bytes=122 src=192.168.8.1 dst=192.168.8.112 sport=2153 dport=10187 packets=2 bytes=122 mark=4096 zone=4096 use=1
Thu Aug 28 05:11:55 2025 daemon.notice netifd: wgclient1 (12410): udp 17 59 src=192.168.8.112 dst=192.168.8.1 sport=59916 dport=53 packets=2 bytes=130 src=192.168.8.1 dst=192.168.8.112 sport=2153 dport=59916 packets=2 bytes=130 mark=4096 zone=4096 use=1
Thu Aug 28 05:11:55 2025 daemon.notice netifd: Interface 'wgclient1' is now down
Thu Aug 28 05:11:55 2025 daemon.notice netifd: Interface 'wgclient1' is setting up now
Thu Aug 28 05:11:55 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient1 ()
Thu Aug 28 05:13:40 2025 user.notice wireguard-debug: USER=root ifname=wgclient1 ACTION=REKEY-GIVEUP SHLVL=1 HOME=/ HOTPLUG_TYPE=wireguard LOGNAME=root DEVICENAME= TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin PWD=/
Thu Aug 28 05:13:42 2025 daemon.notice netifd: Interface 'wgclient1' is now down

5

Have you tried removing and re-creating the WG VPN profiles on the router? I found on mine the Openvpn profiles were no longer working after I had upgraded the firmware, the token value had been wiped out and clicking update appeared to work (no error) but hadn't. Not the same VPN client but you could also try using a profile from the glinet app alternatively, but it should work from the router itself using the credentials/key you entered and generated.

6

Check whether the router's time is synchronized successful.

7

I have no access to the server - if I delete the existing configuration I won't be able to connect and re-create new WG VPN profile.
I have tried copying WG config file from my phone (which connects with no issue), but MT-3000 still won't connect.

8

Both Client (GL-MT3000) and Server (GL-AR300M) have time synchronized successfully.
There is the time zone difference, but both devices are synchronized according to their location.

9

Hi,

If downgrade the MT3000 firmware to v4.7.x, does the VPN client work fine?

Please share the Client MT3000 and Server AR300M with us through the GoodCloud:

Please PM me the MAC addresses and Admin Panel Passwords of the MT3000 and AR300M.