Thanks Lonnie. I will test this next time
Regards
Michael Knill
On 23/5/21, 10:29 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
Hi Michael,
There is a discussion over on the WireGuard mailing list [1], with a
similar situation as you describe.
A reporter suggests the equivalent of AstLinux "Reload WireGuard VPN" (not
Restart) fixes things. Though it would seem a DNS endpoint was changing and
causing loss of WG connection in the [1] discussion. Not exactly the same as
you describe.
Bottom line, to answer your question, it is always "safe" to issue "Reload
WireGuard VPN" via the web interface and not disrupt any active WG connections.
Or from the command line:
--
service wireguard reload
--
Again, NEVER do:
--
service network restart
-- and/or --
ip link set dev wg0 down && ip link set dev wg0 up
--
as that will cause problems only a reboot can fix.
Back to your issue, I would take David Kerr's advice and add
"PersistentKeepalive = 25" to the troublesome peer and see if that makes a
difference.
Lonnie
[1] https://lists.zx2c4.com/pipermail/wireguard/2021-May/006761.html
> On May 18, 2021, at 4:27 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>
> Hmm same problem again with two of my sites.
> Only one of the two Wireguard VPN's are down. I have tried the following:
> arno-iptables-firewall restart
> service network restart
> pppoe-restart
> ip link set dev wg0 down & ip link set dev wg0 up
>
> All to no avail. Any other ideas before I reboot?
> PS there is no failover configured for this site so I don't think MTU is
the issue.
>
> Regards
> Michael Knill
>
> On 20/3/21, 2:09 pm, "Michael Knill" <michael.kn...@ipcsolutions.com.au>
wrote:
>
> Thanks. Guess I will need to test it out.
>
> Regards
> Michael Knill
>
> On 20/3/21, 2:03 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com>
wrote:
>
> While playing with the WG MTU, it seemed to work with only setting
one end and the tunnel used the smallest, but I played it safe and set
everything to 1340.
>
> It would be good to know what the precise answer is.
>
> Lonnie
>
>
>> On Mar 19, 2021, at 9:57 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>
>> Thanks Lonnie.
>>
>> PS I was just thinking (dangerous I know). I would need to set it on
both ends so do you think there would there be any issues with different MTU's
at each end?
>> Ultimately it would be the same eventually but there would be a
migration period.
>>
>> Regards
>> Michael Knill
>>
>> On 20/3/21, 1:41 pm, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com> wrote:
>>
>> I haven't seen any issues with a WG MTU of 1340, yet anyway.
>>
>> Lonnie
>>
>>
>>> On Mar 19, 2021, at 9:29 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>>
>>> Thanks Lonnie
>>>
>>> Hmm that may have something to do with it. Might also be when it fails
over to 4G.
>>> As most of my VPN's carry voice only, I think a standard MTU of 1340
for all my systems should be fine. What do you think?
>>>
>>> Regards
>>> Michael Knill
>>>
>>> On 20/3/21, 10:40 am, "Lonnie Abelbeck" <li...@lonnie.abelbeck.com>
wrote:
>>>
>>> Hi Michael,
>>>
>>> I have not experienced anything like that, WireGuard connectivity is
rock solid for me.
>>>
>>> I don't recall later WireGuard versions having any fixes for what you
are describing.
>>>
>>> Just guessing, the standard MTU for WG is 1420 (1500-80), if you have a
PPPoE connection with a MTU of 1492 you might try setting the WG MTU to 1412
(1500-8-80) or lower to test.
>>>
>>> I'm testing a 4G-LTE/5G fixed wireless internet service from T-Mobile,
they use Carrier Grade NAT (CGNAT) for IPv4 which lowers the MTU to 1420 (just
like WG) so WG needs a MTU setting of 1340 to work over the CGNAT or else it
hangs.
>>>
>>> Lonnie
>>>
>>>
>>>
>>>
>>>> On Mar 19, 2021, at 3:42 PM, Michael Knill
<michael.kn...@ipcsolutions.com.au> wrote:
>>>>
>>>> Hi Group
>>>>
>>>> Not sure if anyone else is experiencing this. I'm on 1.3.10 and all my
systems connect via Wireguard VPN to both my softswitches.
>>>> Its generally all pretty stable but occasionally one of the VPN’s will
be disconnected and I have tried everything I can think of to bring it back up
but only a reboot has managed to do so at this stage.
>>>> Any ideas?
>>>>
>>>> Regards
>>>> Michael Knill
>>>> _______________________________________________
>>>> Astlinux-users mailing list
>>>> Astlinux-users@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>>
>>>> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>>>
>>>
>>>
>>> _______________________________________________
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>
>>> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>>>
>>>
>>> _______________________________________________
>>> Astlinux-users mailing list
>>> Astlinux-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>>
>>> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>>
>>
>>
>> _______________________________________________
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>>
>>
>> _______________________________________________
>> Astlinux-users mailing list
>> Astlinux-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>>
>> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>
>
>
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>
>
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
>
>
> _______________________________________________
> Astlinux-users mailing list
> Astlinux-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
>
> Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
