Wireguard no internet on MUDI GL-E750V2

Technical Support for Routers VPN, DNS, Leaks
1

I configured vpn with nordvpn using UDP and works without issues.

Tried to configure using wireguard and internet stops working. Please help.

Note this same config works on an WRT3200ACM using openwrt. I followed this article to setup, i didnot understand what they meant by the "WG-IP must be in a different subnet as the router. " if anyone has an idea please send me the steps

Attached are the screenshot of my config

Screenshot 2024-08-16 203609
Screenshot 2024-08-16 203609924×629 129 KB

i cant upload logs as txt or paste here. let me know if there is a way to upload it somewhere you can access them. Its just 11KB

2 
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section lan2wgserver skipped due to invalid options
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section nat6 option 'reload' is not supported by fw4
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section gls2s option 'reload' is not supported by fw4
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section gls2s specifies unreachable path '/var/etc/gls2s.include', ignoring section
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section glblock option 'reload' is not supported by fw4
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Section vpn_server_policy option 'reload' is not supported by fw4
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Automatically including '/usr/share/nftables.d/chain-pre/mangle_output/01-process_mark.nft'
Fri Aug 16 20:21:07 2024 daemon.notice netifd: wgclient (3299): [!] Automatically including '/usr/share/nftables.d/chain-post/mangle_output/out_conn_mark_restore.nft'
Fri Aug 16 20:21:08 2024 daemon.notice netifd: wgclient (3299): DROP  all opt -- in * out *  0.0.0.0/0  -> 0.0.0.0/0   match-set GL_MAC_BLOCK src
Fri Aug 16 20:21:09 2024 daemon.notice netifd: wgclient (3299): Failed to parse json data: unexpected character
Fri Aug 16 20:21:09 2024 daemon.notice netifd: wgclient (3299): uci: Entry not found
Fri Aug 16 20:21:09 2024 daemon.notice netifd: Interface 'wgclient' is now down
Fri Aug 16 20:21:09 2024 daemon.notice netifd: Interface 'wgclient' is setting up now
Fri Aug 16 20:21:16 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 1.00 seconds...
Fri Aug 16 20:21:22 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 1.20 seconds...
Fri Aug 16 20:21:29 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 1.44 seconds...
Fri Aug 16 20:21:35 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 1.73 seconds...
Fri Aug 16 20:21:42 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 2.07 seconds...
Fri Aug 16 20:21:49 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 2.49 seconds...
Fri Aug 16 20:21:56 2024 daemon.notice netifd: wgclient (3481): Try again: `us8103.nordvpn.com:51820'. Trying again in 2.99 seconds...


Kernel LOG
[   34.091373] Bridge firewalling registered
[   34.100307] usbcore: registered new interface driver cdc_acm
[   34.106171] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   34.139880] usbcore: registered new interface driver cdc_wdm
[   34.158791] Loading modules backported from Linux version v5.15.92-0-ge515b9902f5f
[   34.166624] Backport generated by backports.git v5.15.92-1-0-gdfe0f60c
[   34.195822] usbcore: registered new interface driver ipheth
[   34.424159] usbcore: registered new interface driver usbserial_generic
[   34.431088] usbserial: USB Serial support registered for generic
[   34.475864] wireguard: WireGuard 1.0.20220627 loaded. See www.wireguard.com for information.
[   34.484669] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[   34.650023] xt_time: kernel timezone is -0000
[   34.667252] usbcore: registered new interface driver cdc_ether
[   34.686535] usbcore: registered new interface driver cdc_ncm
[   34.792848] usbcore: registered new interface driver huawei_cdc_ncm
[   35.406356] PPP generic driver version 2.4.2
[   35.429286] NET: Registered protocol family 24
[   35.448974] qmi_wwan 1-1.2:1.4: cdc-wdm0: USB WDM device
[   35.467520] qmi_wwan 1-1.2:1.4: QuectelEC25&EC21&EG91&EG95&EG06&EP06&EM06&BG96&AG35 qmi wwan detected
[   35.478091] qmi_wwan 1-1.2:1.4 wwan0: register 'qmi_wwan' at usb-1b000000.usb-1.2, WWAN/QMI device, 9e:6f:f7:14:fb:70
[   35.489428] usbcore: registered new interface driver qmi_wwan
[   35.516845] usbcore: registered new interface driver rndis_host
[   35.628285] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[   35.637033] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   50.638228] ath10k_pci 0000:00:00.0: qca9887 hw1.0 target 0x4100016d chip_id 0x004000ff sub 0000:0000
[   50.647816] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   50.660788] ath10k_pci 0000:00:00.0: firmware ver 10.2.4-1.0-00047 api 5 features no-p2p,ignore-otp,skip-clock-init,mfp,allows-mesh-bcast crc32 62f7565f
[   51.443162] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 546cca0d
[   51.451144] ath10k_pci 0000:00:00.0: failed to read device EEPROM at 0000
[   51.458183] ath10k_pci 0000:00:00.0: failed to read calibration data from EEPROM: -22
[   52.611462] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 5 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[   52.749111] ath: EEPROM regdomain: 0x0
[   52.749124] ath: EEPROM indicates default country code should be used
[   52.749129] ath: doing EEPROM country->regdmn map search
[   52.749142] ath: country maps to regdmn code: 0x3a
[   52.749149] ath: Country alpha2 being used: US
[   52.749154] ath: Regpair used: 0x3a
[   52.828433] usbcore: registered new interface driver option
[   52.834291] usbserial: USB Serial support registered for GSM modem (1-port)
[   52.841979] option 1-1.2:1.0: GSM modem (1-port) converter detected
[   52.848811] usb 1-1.2: GSM modem (1-port) converter now attached to ttyUSB0
[   52.856197] option 1-1.2:1.1: GSM modem (1-port) converter detected
[   52.863038] usb 1-1.2: GSM modem (1-port) converter now attached to ttyUSB1
[   52.870504] option 1-1.2:1.2: GSM modem (1-port) converter detected
[   52.877272] usb 1-1.2: GSM modem (1-port) converter now attached to ttyUSB2
[   52.884734] option 1-1.2:1.3: GSM modem (1-port) converter detected
[   52.891576] usb 1-1.2: GSM modem (1-port) converter now attached to ttyUSB3
[   53.028454] ath: EEPROM regdomain: 0x0
[   53.028471] ath: EEPROM indicates default country code should be used
[   53.028475] ath: doing EEPROM country->regdmn map search
[   53.028492] ath: country maps to regdmn code: 0x3a
[   53.028499] ath: Country alpha2 being used: US
[   53.028504] ath: Regpair used: 0x3a
[   53.040868] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   53.043260] ieee80211 phy1: Atheros AR9531 Rev:2 mem=0xb8100000, irq=13
[   53.088610] kmodloader: done loading kernel modules from /etc/modules.d/*
[   53.096012] kmodloader: ["gl_system": "kernel_load"]
[  139.617487] tertf: br-lan registered, add it
[  139.689321] br-lan: port 1(eth0) entered blocking state
[  139.689342] br-lan: port 1(eth0) entered disabled state
[  139.689729] device eth0 entered promiscuous mode
[  141.747576] eth0: link up (100Mbps/Full duplex)
[  141.787528] br-lan: port 1(eth0) entered blocking state
[  141.787551] br-lan: port 1(eth0) entered forwarding state
[  150.667644] ath10k_pci 0000:00:00.0: failed to read device EEPROM at 0000
[  150.667672] ath10k_pci 0000:00:00.0: failed to read calibration data from EEPROM: -22
[  157.256168] ath10k_pci 0000:00:00.0: pdev param 0 not supported by firmware
[  157.325809] br-lan: port 2(wlan1) entered blocking state
[  157.325830] br-lan: port 2(wlan1) entered disabled state
[  157.326235] device wlan1 entered promiscuous mode
[  157.796357] br-lan: port 3(wlan0) entered blocking state
[  157.796378] br-lan: port 3(wlan0) entered disabled state
[  157.796768] device wlan0 entered promiscuous mode
[  157.796938] br-lan: port 3(wlan0) entered blocking state
[  157.796951] br-lan: port 3(wlan0) entered forwarding state
[  158.340660] br-lan: port 3(wlan0) entered disabled state
[  161.648941] br-lan: port 2(wlan1) entered blocking state
[  161.648963] br-lan: port 2(wlan1) entered forwarding state
[  171.507831] br-lan: port 3(wlan0) entered blocking state
[  171.507855] br-lan: port 3(wlan0) entered forwarding state
[19303.475118] device wlan0 left promiscuous mode
[19303.475278] br-lan: port 3(wlan0) entered disabled state
[19303.929283] device wlan1 left promiscuous mode
[19303.929432] br-lan: port 2(wlan1) entered disabled state
[19310.193070] br-lan: port 2(wlan0) entered blocking state
[19310.193091] br-lan: port 2(wlan0) entered disabled state
[19310.193481] device wlan0 entered promiscuous mode
[19311.622400] ath10k_pci 0000:00:00.0: failed to read device EEPROM at 0000
[19311.622427] ath10k_pci 0000:00:00.0: failed to read calibration data from EEPROM: -22
[19313.804294] ath10k_pci 0000:00:00.0: pdev param 0 not supported by firmware
[19313.843651] br-lan: port 3(wlan1) entered blocking state
[19313.843672] br-lan: port 3(wlan1) entered disabled state
[19313.844080] device wlan1 entered promiscuous mode
[19315.805668] wlan-sta0: authenticate with 08:36:c9:ee:9a:6b
[19315.819762] wlan-sta0: send auth to 08:36:c9:ee:9a:6b (try 1/3)
[19315.822097] wlan-sta0: authenticated
[19315.866353] wlan-sta0: associate with 08:36:c9:ee:9a:6b (try 1/3)
[19315.870768] wlan-sta0: RX AssocResp from 08:36:c9:ee:9a:6b (capab=0x411 status=0 aid=38)
[19315.871036] wlan-sta0: associated
[19315.938135] wlan-sta0: Limiting TX power to 30 (30 - 0) dBm as advertised by 08:36:c9:ee:9a:6b
[19316.420647] br-lan: port 2(wlan0) entered blocking state
[19316.420669] br-lan: port 2(wlan0) entered forwarding state
[19317.954608] br-lan: port 3(wlan1) entered blocking state
[19317.954630] br-lan: port 3(wlan1) entered forwarding state
[87446.707182] eth0: link down
[87446.707596] br-lan: port 1(eth0) entered disabled state
[87448.788700] eth0: link up (10Mbps/Full duplex)
[87448.788762] br-lan: port 1(eth0) entered blocking state
[87448.788775] br-lan: port 1(eth0) entered forwarding state
[87449.826953] eth0: link down
[87449.827321] br-lan: port 1(eth0) entered disabled state
[87451.908695] eth0: link up (100Mbps/Full duplex)
[87451.908759] br-lan: port 1(eth0) entered blocking state
[87451.908771] br-lan: port 1(eth0) entered forwarding state
3

[Interface]
Address = 192.168.10.1/24

instead of

[Interface]
Address = 192.168.8.1/24

This is meant by "should be on another subnet, using the same IP 192.168.8.1 like the router internally has does not work.

Greetings Lars

4

Even after changing to 192.168.10.1/24 and rebooting same issue. Pls can you guide me.

Internet works without WG

5

Your [Interface] address is wrong.
This should be the address NordVPN provides you, you can get it from your config file. Anyway
it's not related to GL-inet anyway.

You can use this tool as well:

6

@radioguy , you solved it. Thank you. Your solution is way better. Just for others if they are looking,

We just need to insert the private key into the config files @radioguy provided the links to based on your location. Then just upload to wireguard client and start config.