Hi,
I have RB5009 and RB3011, I have successfully create a connection between router using Wireguard over IPv6
However, I trying to connect over IPv4, both router attempt to connect but not connecting…
I have set IPv4 Firewall Filter (input, accept, dst port: 13231/udp)
How to make it work? Do I need to disable FastPath/NAT Acceleration?
I don’t understand the problem.
In the screenshot provided you have IPv6 endpoints and trying to make IPv4 traffic inside wireguard?
And what does not work? IPv4 endpoints?
Yes, IPv4 endpoint doesn’t work.
Is between two local devices or between two remote devices?
Check if your IPv4 is not a private class and is NATted from ISP, and on that case, you can not do nothing, except ask your ISP.
Both site having Public IPv4
Site: A, RB5009
ISP: Maxis
GPON Fiber, 500/100Mbps
121.121.202.184
/export hide-sensitive file=whatever
For both sides.
Review for sensitive info before posting between code quotes.
Firewall? try another port? ¯_(ツ)_/¯
And please edit your public IPs, serial numbers and DDNS hosts.
I tried different port (27015/half-life) just to make sure ISP not filter it… didn’t work
I have remove S/N, IP Address I have is dynamic, change every 14 days
I have attached and remove sensitive data
a.log.rsc (13.5 KB)
b.log.rsc (12.1 KB)
What interface should ip4 traffic arrive on the router ?
It’s not clear to me what interface pppoe-out1 should be … and that’s the one accepting WG in your ip4 firewall rules.
On b-router there is no itf specified, so all accepted.
On a-router it’s pppoe-out1.
PS remove sensitive info from exports. Serial number, pppoe-account names, public key (useless without private key, I know, but no need to test the waters …)
EDIT:
I see … sfp, then vlan, then pppoe-out1
both site is “pppoe-out1”
either I add “in interface” or not, both mikrotik wont connect
however, I have tested between remote PC wireguard to mikrotik wireguard
Remote PC A to Site A WG = Connected
Remote PC B to Site B WG = Connected
both are connected… Mikrotik A WG cannot connect IPv4 endpoint to Mikrotik B WG or vice-versa (A>B, B>A)
Torch showing both is trying to connect, same issue with different port…
.
deleted old one
.
Yes, both site using GPON ONU SFP
…
if IPv6 endpoints can connect both mikrotik, it seem IPv4 FastTrack causing this issue
Disable FastTrack.
It doesn’t work with WG.
Once you know it works, the rule can be refined.
Alright, I disable FastTrack on both site, I’ll let you know the results
After run several test… Wireguard works when FastTrack/NAT Acceleration disabled!
