Score:0

Wireguard - no handshake

cn flag

I've had a Wireguard server up for like 2yrs now (Server is currently running Ubuntu 21.04). Works great on a few devices I have. As of recent, I thought I'd add a new client or two to the VPN. I recently put up an Ubuntu server 20.04.3. So, I install Wireguard, create the keys,create the config wg0...swapping the publickeys, bring the server back up bring the client up and... Bubkis. No handshake.

I can't figure out what is stopping the handshake. Anybody know if there's any issues with Wireguard in 20.04, 21.04? I get nothing on dkms status, but i figuring that because it's already in the kernel. I'm not sure how to trouble shoot this anymore. Any help is greatly appreciated.

cocomac avatar
cn flag
FYI: [21.04 is EOL](https://meta.askubuntu.com/questions/19913/end-of-life-notice-ubuntu-21-04-hirsute-hippo-reached-end-of-life-on-january?cb=1). I suggest using 21.10 if you prefer faster releases, or 20.04 LTS for stability.
FedKad avatar
cn flag
Please double, triple, quadruple... check your IP addresses, network masks, port numbers, and keys in your configuration files. Is there a UDP connectivity between your client and server for the UDP port you are using?
guiverc avatar
cn flag
Ubuntu 21.04 (along with all flavors) is *End-of-Life* and thus unsupported on this site (https://askubuntu.com/help/on-topic), and many other Ubuntu sites, unless your question is specific to moving to a supported release of Ubuntu. https://fridge.ubuntu.com/2022/01/21/ubuntu-21-04-hirsute-hippo-end-of-life-reached-on-january-20-2022/ https://help.ubuntu.com/community/EOLUpgrades
cn flag
Good to know about the "End of life". Wonder why Raspberry pi still offers the OS for download?
cn flag
I have to manage that closely as I'm running Nextcloud and I can't go above php 8.0. What would you guys suggest? That aside, I saw some generic posts elsewhere that the Ubuntu Pi OS had issues with Wireguard. My topology requires this server and an upcoming server be on a VPN so I can do totally remote data backup. Any suggestions at this point are appreciated.
cn flag
FedKad - I must have checked everything about 80 times now. Ha
cn flag
As a side note, the server that's at EoL is actually the server that's working. It's the VPN server and I have a number of devices already on it. With my anticipated topology I just wanted to add two more.
Score:1
cn flag

Try specifying an MTU value in the interface section of the Wireguard configuration file. e.g.

[Interface]
Address = 10.7.0.1/24, fddd:2c4:2c4:2c4::1/64
PrivateKey = <private_key_here>
ListenPort = 51820
# https://gist.github.com/diyism/1b80903a83776675031c73ae499438d8
MTU = 1300
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.