User.notice root: disable GRO on wgclient

[praveen_nagesh]

I purchased client and server from GLiNet to set up a site to site vpn. I followed all the directions to setup WireGuard VPN on my Flint server. I downloaded the config file and when I try to setup by WireGuard server on my new GL-AXT1800 , I am getting the following error. Please help.
Log
Sun Apr 6 19:32:51 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Sun Apr 6 19:32:52 2025 user.notice root: disable GRO on wgclient
Sun Apr 6 19:34:41 2025 user.notice wireguard-debug: USER=root ifname=wgclient ACTION=REKEY-GIVEUP SHLVL=1 HOME=/ HOTPLUG_TYPE=wireguard LOGNAME=root DEVICENAME= TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin PWD=/
Sun Apr 6 19:34:42 2025 daemon.notice netifd: Interface 'wgclient' is now down
Sun Apr 6 19:34:42 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Sun Apr 6 19:34:42 2025 user.notice root: disable GRO on wgclient
Sun Apr 6 19:34:42 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Sun Apr 6 19:36:29 2025 user.notice wireguard-debug: USER=root ifname=wgclient ACTION=REKEY-GIVEUP SHLVL=1 HOME=/ HOTPLUG_TYPE=wireguard LOGNAME=root DEVICENAME= TERM=linux SUBSYSTEM=wireguard PATH=/usr/sbin:/usr/bin:/sbin:/bin PWD=/
Sun Apr 6 19:36:30 2025 daemon.notice netifd: Interface 'wgclient' is now down
Sun Apr 6 19:36:30 2025 daemon.notice netifd: Interface 'wgclient' is setting up now
Sun Apr 6 19:36:30 2025 user.notice root: disable GRO on wgclient
Sun Apr 6 19:36:30 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()
Sun Apr 6 19:36:39 2025 daemon.notice netifd: Interface 'wgclient' is now down
Sun Apr 6 19:36:40 2025 user.notice firewall: Reloading firewall due to ifdown of wgclient ()

[bruce]

Hello,

Is AXT1800 WG Client VPN unable to connect to WG Server?

The inability to connect has nothing to do with this log.

@praveen_nagesh

disable GRO on wgclient

Please refer to the following guide to check the VPN server and client:

How to troubleshoot WireGuard

Table of Contents Why WireGuard? I can't find "VPN" in the web interface How should my network be configured? This doesn't work This works Mobile Networks & StarLink Port Forwarding Dynamic IP Addresses Blocked Ports Testing WireGuard Configuration Route all traffic through the tunnel Adjust DNS server The MTU Issue UDP and its pitfalls Why WireGuard? WireGuard is a modern VPN protocol that is at the cutting edge of technology. It is easy to configure and offers high security. WireGuard …

Build your own WireGuard Home Server with two GL.iNet Routers - GL.iNet...

[praveen_nagesh]

Hello Bruce,Thanks for the reply. I did try the steps provided in the document but I am still unable to connect to the GL-iNet WireGuard server from the client. The server is running the wireguard VPN successfully and has been assigning DDNS, Not sure what is the issue.

[bruce]

Hello,

1. Please do a comparison test:
   When the Flint home router WG server enabled, export the WG profile and load it on the PC WireGuard APP (please bring the PC connect to other Internet source, different from home router), to test if the WG server works ok.

2. Does home router have a public IP? If have a primary device such as ISP modem, you need to enable port forwarding on ISP modem.

[praveen_nagesh]

Thank you Bruce. I am now able to access my VPN after setting up port forwarding. Your comment helped me a lot. You are the BEST!

[vividind]

@praveen_nagesh thanks for putting your question which is exactly the same that I am encountering
@bruce Thanks for valuable solution

Can one of you elaborate on #2? (enable port fwding on ISP modem). What is the port# I have to enter and which device Internal IP address I have to enter? for the port fwd. Thanks in advance

[Smarley]

Which port need to be forwarder, 52180, 80 or 8080?
I'm with similar problem, and I have the WireGuard port forward to it.
This was not happening before I upgrade to 4.7.0 on the AXT1800

[bruce]

Determine the forwarding port number set on the primary router depends on the VPN services enabled by your GL router.

By default, WireGuard 51820 and OpenVPN 1194.

If you have modified the listen/local port number, please follow the ones you have modified.

Here video guide and docs:

WireGuard Server - GL.iNet Router Docs 4

[jhlee2222]

I'm having a variation of this issue. I'm trying to establish a WireGuard Router-to-Router VPN using my Flint2 as the home router (Wireguard Server Configured) and a travel router, the Glinet Beryl AX. I don't think the issue is with the server (Flint2), as I'm able to establish a connection from my devices (Android Phone, Tablet, and PC) using a wireguard client and profile for each of those. I created a matching profile, with only the key details differing for the Beryl and loaded it to the travel router. However, my VPN connection fails with log details similar to what @praveen_nagesh shows at the opening of this thread.

A curious thing of note, the client profile for my Beryl AX does show up in the status of the server on the Flint2. From what I've seen, even a new profile won't show as one of the clients until it's made a connection to the server at least once. This implies a connection has been made successfully, even if just for a moment.

Can anyone advise on what the issue might be? Again, other devices can connect directly to the Wireguard Server on the Flint2, but the Beryl AX fails to connect even with similar profiles. With this in mind, it seems it's something with the Beryl's client setup, not the server on the Flint2.

[bruce]

Hello,

1. May I know if Beryl AX connected to others network like tethering/repeater to phone, second ISP, etc?
   anyway it cannot connect to the Flint 2 when it as VPN client and will connect to Flint 2 server.

2. Beryl AX and Flint 2 LAN subnet can not setup the same one, you can change the Beryl AX LAN to 192.168.10.1/24 and Flint 2 192.168.8.1/24.

3. If no luck, please PM me the Beryl AX issue syslog.