Btest client keep showing “connecting…”. Is there any special setting to make btest works over vpn connection? I would like to compare wireguard vs ipsec with hardware acceleration.
Can you reach the btest server from that device ?
Is btest server active on that device ?
No FW rules preventing that sort of traffic over VPN ?
As for performance testing, best to start and stop on devices connected to the routers under test.
Don’t use btest on those routers themselves since it can create quite some CPU-load (depending on architecture), giving you false results.
I use iperf3 in my network for such testing (Windows / Linux / Android).
Something like:
PC1 - router1 - - router2 - PC2
I found it interesting I have two ros Lan A 192.168.1.0 and Lan B 192.168.8.0 connected with wireguard. all devices connected to both side can reach devices on the other side. But these two routers cannot ping nor btest each other.
Please post config for both devices.
/export hide-sensitive file=
Check for any left-overs of sensitive info, edit it out, then post between code quotes.
My case is when ping from
192.168.1.2 to 192.168.8.5 success
192.168.8.5 to 192.168.1.2 success
192.168.1.2 to device in 192.168.8.x failed
192.168.8.5 to device in 192.168.1.x failed
device in 192.168.1.x to device in 192.168.8.x success
device in 192.168.8.x to device in 192.168.1.x success
thanks for help!
192.168.8.5 (gateway is 192.168.8.1)
/interface wireguard
add listen-port=13231 mtu=1420 name=wg0/interface wireguard peers
add allowed-address=10.99.8.1/32,192.168.1.0/24 endpoint-address=
vpn.XXXXXXXX.com endpoint-port=13231 interface=wg0 public-key=
“XXXXXXXXpidaQcSmCvdKbStF1+REC/cfkVLXXXXXXXX=”/ip address
add address=192.168.8.5/24 comment=defconf interface=bridge1 network=
192.168.8.0
add address=10.99.8.2 interface=wg0 network=10.99.8.1/ip firewall filter
add action=accept chain=input comment=“defconf: accept ICMP” protocol=icmp
add action=accept chain=input dst-port=13231 log=yes protocol=udp
add action=accept chain=forward dst-address=192.168.1.0/24 src-address=
192.168.8.0/24
add action=accept chain=forward dst-address=192.168.8.0/24 src-address=
192.168.1.0/24
add action=accept chain=input dst-port=8291 protocol=tcp/ip route
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=10.99.8.1
pref-src=“” routing-table=main scope=30 suppress-hw-offload=no
target-scope=10
add disabled=no dst-address=0.0.0.0/0 gateway=192.168.8.1 routing-table=main
suppress-hw-offload=no
192.168.1.2 (gateway is 192.168.1.1)
/interface wireguard
add listen-port=13231 mtu=1420 name=wg0/interface wireguard peers
add allowed-address=10.99.8.2/32,192.168.8.0/24 interface=wg0 public-key=
“XXXXXXXXX2DT14GZ9+b2cuoWNpETpYWyr/vXXXXXXXX=”/ip address
add address=192.168.1.2/24 comment=defconf interface=ether2 network=
192.168.1.0
add address=103.XX.XX.94/29 interface=ether1 network=103.XX.XX.88
add address=10.99.8.1 interface=wg0 network=10.99.8.2/ip firewall filter
add action=accept chain=input dst-port=13231 protocol=udp
add action=accept chain=forward dst-address=192.168.8.0/24 out-interface=wg0
src-address=192.168.1.0/24
add action=accept chain=forward dst-address=192.168.1.0/24 out-interface=wg0
src-address=192.168.8.0/24/ip firewall nat
add action=masquerade chain=srcnat comment=“defconf: masquerade”
ipsec-policy=out,none out-interface-list=WAN/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=103.XXX.XXX.89
add disabled=no distance=1 dst-address=192.168.8.0/24 gateway=10.99.8.2
pref-src=“” routing-table=main scope=30 suppress-hw-offload=no
target-scope=10
For both I already think address definition for WG-itf is wrong.
It is now:
add address=10.99.8.2 interface=wg0 network=10.99.8.1
and
add address=10.99.8.1 interface=wg0 network=10.99.8.2
Should be more like
add address=10.99.8.2/24 interface=wg0 network=10.99.8.0 (you can use smaller subnet like /30 if you only use 2 addresses on that interface)
and
add address=10.99.8.1/24 interface=wg0 network=10.99.8.0 (you can use smaller subnet like /30 if you only use 2 addresses on that interface)
Thanks. Changes has been made. However, problem not solve.
Can you post config again please.
FULL config, not parts of it.