ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
2024-08-16 06:27:09 - last edited 2024-08-16 06:57:33
Model: ER706W-4G  
Hardware Version: V1
Firmware Version: ER706W-4G_V1_1_0 1.20240723.67170(4555)

At initial bootup , the ER706W-4G doesn't always initiate outgoing traffic on the wireguard vpn interface until I manually go into the wireguard peer in the web ui and click disable and then enable.

 

Edit: This is with keepalive enabled and an endpoint configured

Edit2: I figured out a workaround by setting the secondary ntp server to the internal ip of a server at the other end of the wireguard vpn

  0      
  0      
#1
Options
4 Reply
Re:ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
2024-08-16 06:46:15

  @staples1347 

 

I think this only happens if you have 0.0.0.0/0 as destination. if you try this in controller mode, you have to readopt the router after every boot.

the rumors say that Policy route comes in Omada version 5.15/5.16 with associated router firmware

 

 

  0  
  0  
#2
Options
Re:ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
2024-08-16 23:41:37

  @MR.S 

 

At the moment the Peer endpoint is set to the public ip of the remote wireguard server, Allowed Address is set to 10.17.0.0/18 , and I have Persistent Keepalive set to 14.  Also, I am running the router in standalone mode.  It's possible this is normal for wireguard as on full Linux servers, I normally also setup OSPF to go along with the vpn which keeps traffic flowing in both directions on a regular basis, but OSPF on this router doesn't seem to be showing the wireguard interface as an option.

  0  
  0  
#3
Options
Re:ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
2024-08-19 01:49:24

Hi @staples1347 

Thanks for posting in our business forum.

OSPF and RIP are now only working with the GRE VPN.

The rest of the VPN types do not support it.

  1  
  1  
#4
Options
Re:ER706W-4G: Bug: Wireguard doesn't always initiate traffic at initial bootup
2024-08-20 00:03:47 - last edited 2024-08-20 00:04:14

  @staples1347 

I just setup a client to server Wireguard vpn on Linux and can confirm with persistent keepalive set to 14 seconds , the wireguard "client" sends keepalive packets every 14 seconds even if the interface isn't sending any packets so it looks like this isn't functioning on the TP-Link.  Note: To determine that the TP-Link wasn't sending keepalive packets, I ran tcpdump on the router that the TP-Link's wan interface was connected to in addition to running "wg show" on the wireguard server.

  0  
  0  
#5
Options