MT3000 Beryl AX freezes on WireGuard start/stop — requires restart to resume connection

[prabhu]

Hi everyone,

I'm running into a frustrating issue with my GL.iNet GL-MT3000 (Beryl AX) and was hoping someone here might have a workaround or know if this is a known bug.

The Problem: Whenever I start or stop the WireGuard VPN client via the Admin Panel, the entire router freezes. The Wi-Fi network remains broadcasted, but internet access drops entirely. The Admin Panel becomes completely unresponsive, and I lose the ability to SSH into the device. To resume the connection and recover the router, it has to be manually restarted (power cycled).

Device Details:

• Model: GL-MT3000 (Beryl AX)

• Firmware Version: v4.11.0

• Power Supply: Original OEM power adapter

Steps to Reproduce:

1. Boot up the router and establish a standard internet connection.

2. Navigate to the Admin Panel > VPN > WireGuard Client.

3. Click "Start" on an existing WireGuard profile (or click "Abort" if one is already running).

4. The UI hangs on the loading state, and the router locks up completely within seconds.

What I've Already Tried:

• Performing a clean factory reset (without keeping settings).

• Deleting and re-importing the WireGuard configuration files directly (instead of copying/pasting text).

• Changing the MTU size in the WireGuard config.

• Attempting to check the System Logs (unfortunately, because the router locks up instantly, the logs don't seem to write the exact crash event before freezing).

Has anyone else experienced this hard lockup with the WireGuard client on the Beryl AX? Are there any specific firewall rules, memory management tweaks, or firmware versions that resolve this?

Or, is it good idea to return this?

[will.qiu]

Hi,

Thank you for the detailed report.

We tested starting and stopping the WireGuard client on an MT3000 running firmware v4.11.0, but we were unable to reproduce the freeze locally.

Could you please send us the following via private message so we can try to reproduce the issue with the same configuration and investigate further? Please do not post either file publicly, as they may contain private network or VPN information.

1. A configuration backup exported from LuCI: System > Backup / Flash Firmware > Generate archive.

How to Export/Import Backup Configuration Files via LuCI

Introduction When using a GL.iNet router, you may need to back up your current system configurations or restore previous settings after a reset or firmware upgrade. This guide will walk you through how to export and import your router's backup configuration files via LuCI. Part 1: How to Export Backup Configuration Files via LuCI Step 1: Access the LuCI Advanced Settings Log into your GL.iNet router's web Admin Panel (the default IP address is usually 192.168.8.1). On the left-hand menu, navi…

2. A persistent system log collected during one reproduction attempt. Connect to the router through SSH and run:

   uci set system.@system[0].log_file='/root/syslog.log'
   uci commit system
   /etc/init.d/log restart
   logger -t wg-debug 'persistent logging enabled'
   

   Then start or stop the WireGuard client to reproduce the freeze. After power-cycling the router and reconnecting, download /root/syslog.log via SCP—for example, with WinSCP—and send it to us by private message.

   After collecting the file, disable the temporary persistent logging to avoid continued writes to flash:

   uci -q delete system.@system[0].log_file
   uci commit system
   /etc/init.d/log restart
   rm -f /root/syslog.log
   

To send a private message, click the Technical Support avatar and then click Message. If your account cannot start a private message, please let us know and we will initiate it.

Once we receive the backup and log, we will investigate further.