Wireguard client trouble

Hello.

I'm having a strange problem with this.

I have two wireguard connections defined in my computer (to two different places) One of them works ok. I just imported the .conf file, and it worked ok.

The second says that is connected, but I cannot reach any machine in the remote place nor the internet.

The more strange thing for me is that same configuration file (I mean the same peer.conf file) is working in a Windows machine and in an Android 12 phone. So the wireguard remote server is working, and the file is correct (no keys errors etc).

The wg0.conf for this server is

[Interface]
Address = 10.13.13.1
ListenPort = 51820
PrivateKey = ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZz=
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth+ -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth+ -j MASQUERADE

[Peer]
# peer1
PublicKey = yLP6Pr0vuOtmXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXx0M=
PresharedKey = FYYYYYYYYYYYYYYYYYYYYYYYYYYYYYncHpOc=
AllowedIPs = 10.13.13.2/32

and more peers

What can be happening?

System:
  Kernel: 6.1.9-arch1-2 arch: x86_64 bits: 64 compiler: gcc v: 12.2.1
    parameters: BOOT_IMAGE=/@/boot/vmlinuz-linux
    root=UUID=b4ca416f-530b-4ae4-bf0b-835736bc4fe7 rw rootflags=subvol=@
    quiet quiet splash rd.udev.log_priority=3 vt.global_cursor_default=0
    loglevel=3 ibt=off
  Desktop: KDE Plasma v: 5.26.5 tk: Qt v: 5.15.8 info: latte-dock
    wm: kwin_x11 vt: 1 dm: SDDM Distro: Garuda Linux base: Arch Linux
Machine:
  Type: Desktop Mobo: MACHINIST model: X99Z V102 v: IENGINEER
    serial: <superuser required> UEFI: American Megatrends v: C612RD24
    date: 11/02/2020
CPU:
  Info: model: Intel Xeon E5-2670 v3 bits: 64 type: MT MCP arch: Haswell
    level: v3 note: check built: 2013-15 process: Intel 22nm family: 6
    model-id: 0x3F (63) stepping: 2 microcode: N/A
  Topology: cpus: 1x cores: 12 tpc: 2 threads: 24 smt: enabled cache:
    L1: 768 KiB desc: d-12x32 KiB; i-12x32 KiB L2: 3 MiB desc: 12x256 KiB
    L3: 30 MiB desc: 1x30 MiB
  Speed (MHz): avg: 1833 high: 3100 min/max: 1200/3100 scaling:
    driver: intel_cpufreq governor: performance cores: 1: 1200 2: 3100 3: 1200
    4: 1200 5: 3100 6: 1200 7: 1200 8: 3100 9: 3100 10: 1200 11: 1201 12: 1200
    13: 1200 14: 1200 15: 1200 16: 3100 17: 1201 18: 3100 19: 3100 20: 1200
    21: 1200 22: 1202 23: 3100 24: 1199 bogomips: 110435
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
  Vulnerabilities: <filter>
Graphics:
  Device-1: NVIDIA GK208B [GeForce GT 710] vendor: Gigabyte driver: nvidia
    v: 470.161.03 alternate: nouveau,nvidia_drm non-free: series: 470.xx+
    status: legacy-active (EOL~2023/24) arch: Fermi 2 code: GF119/GK208
    process: TSMC 28nm built: 2010-16 pcie: gen: 2 speed: 5 GT/s lanes: 8
    bus-ID: 03:00.0 chip-ID: 10de:128b class-ID: 0300
  Display: x11 server: X.Org v: 21.1.7 with: Xwayland v: 22.1.7
    compositor: kwin_x11 driver: N/A display-ID: :0 screens: 1
  Screen-1: 0 s-res: 3840x1080 s-dpi: 93 s-size: 1049x292mm (41.30x11.50")
    s-diag: 1089mm (42.87")
  Monitor-1: DVI-I-1 pos: primary,right res: 1920x1080 hz: 60 dpi: 92
    size: 531x299mm (20.91x11.77") diag: 609mm (23.99") modes: N/A
  Monitor-2: HDMI-0 pos: left res: 1920x1080 hz: 60 dpi: 94
    size: 521x293mm (20.51x11.54") diag: 598mm (23.53") modes: N/A
  API: OpenGL v: 4.6.0 NVIDIA 470.161.03 renderer: NVIDIA GeForce GT
    710/PCIe/SSE2 direct render: Yes
Audio:
  Device-1: Intel C610/X99 series HD Audio driver: snd_hda_intel v: kernel
    bus-ID: 00:1b.0 chip-ID: 8086:8d20 class-ID: 0403
  Device-2: NVIDIA GK208 HDMI/DP Audio vendor: Gigabyte
    driver: snd_hda_intel v: kernel pcie: gen: 2 speed: 5 GT/s lanes: 8
    bus-ID: 03:00.1 chip-ID: 10de:0e0f class-ID: 0403
  Sound API: ALSA v: k6.1.9-arch1-2 running: yes
  Sound Server-1: PulseAudio v: 16.1 running: no
  Sound Server-2: PipeWire v: 0.3.65 running: yes
Network:
  Device-1: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet
    driver: r8169 v: kernel pcie: gen: 1 speed: 2.5 GT/s lanes: 1 port: e000
    bus-ID: 05:00.0 chip-ID: 10ec:8168 class-ID: 0200
  IF: enp5s0 state: up speed: 1000 Mbps duplex: full mac: <filter>
  IF-ID-1: br-0230801b624c state: down mac: <filter>
  IF-ID-2: br-96c3f4053d28 state: up speed: 10000 Mbps duplex: unknown
    mac: <filter>
  IF-ID-3: br-a539ad42d9b3 state: up speed: 10000 Mbps duplex: unknown
    mac: <filter>
  IF-ID-4: br-ab3483bdfeed state: up speed: 10000 Mbps duplex: unknown
    mac: <filter>
  IF-ID-5: br-e28deef329de state: up speed: 10000 Mbps duplex: unknown
    mac: <filter>
  IF-ID-6: docker0 state: up speed: 10000 Mbps duplex: unknown mac: <filter>
  IF-ID-7: vboxnet0 state: down mac: <filter>
  IF-ID-8: veth33cd690 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-9: veth69f8b91 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-10: veth6e9a7b1 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-11: veth85fba8b state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-12: veth871127d state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-13: vetha88f13c state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-14: vethabc020d state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-15: vethac1b9fd state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-16: vethaf54b43 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-17: vethba15604 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-18: vethe99d681 state: up speed: 10000 Mbps duplex: full
    mac: <filter>
  IF-ID-19: vethfe7160a state: up speed: 10000 Mbps duplex: full
    mac: <filter>
Drives:
  Local Storage: total: 953.87 GiB used: 386.33 GiB (40.5%)
  SMART Message: Unable to run smartctl. Root privileges required.
  ID-1: /dev/nvme0n1 maj-min: 259:0 vendor: Intel model: SSDPEKNW010T9
    size: 953.87 GiB block-size: physical: 512 B logical: 512 B speed: 31.6 Gb/s
    lanes: 4 type: SSD serial: <filter> rev: 001C temp: 43.9 C scheme: GPT
Partition:
  ID-1: / raw-size: 195.31 GiB size: 195.31 GiB (100.00%)
    used: 80.99 GiB (41.5%) fs: btrfs dev: /dev/nvme0n1p1 maj-min: 259:1
  ID-2: /boot/efi raw-size: 500 MiB size: 499 MiB (99.80%)
    used: 600 KiB (0.1%) fs: vfat dev: /dev/nvme0n1p3 maj-min: 259:3
  ID-3: /home raw-size: 758.06 GiB size: 758.06 GiB (100.00%)
    used: 305.34 GiB (40.3%) fs: btrfs dev: /dev/nvme0n1p2 maj-min: 259:2
  ID-4: /var/log raw-size: 195.31 GiB size: 195.31 GiB (100.00%)
    used: 80.99 GiB (41.5%) fs: btrfs dev: /dev/nvme0n1p1 maj-min: 259:1
  ID-5: /var/tmp raw-size: 195.31 GiB size: 195.31 GiB (100.00%)
    used: 80.99 GiB (41.5%) fs: btrfs dev: /dev/nvme0n1p1 maj-min: 259:1
Swap:
  Kernel: swappiness: 133 (default 60) cache-pressure: 100 (default)
  ID-1: swap-1 type: zram size: 31.25 GiB used: 263.8 MiB (0.8%)
    priority: 100 dev: /dev/zram0
Sensors:
  System Temperatures: cpu: 0.0 C mobo: 48.0 C gpu: nvidia temp: 55 C
  Fan Speeds (RPM): fan-1: 0 fan-2: 1252 fan-3: 0 fan-4: 0 fan-5: 0
    gpu: nvidia fan: 56%
  Power: 12v: N/A 5v: N/A 3.3v: 3.20 vbat: 3.28
Info:
  Processes: 540 Uptime: 1d 3h 40m wakeups: 0 Memory: 31.25 GiB
  used: 8.08 GiB (25.8%) Init: systemd v: 252 default: graphical
  tool: systemctl Compilers: gcc: 12.2.1 clang: 15.0.7 Packages: 1987
  pm: pacman pkgs: 1979 libs: 405 tools: octopi,paru,yay pm: rpm pkgs: 0
  pm: flatpak pkgs: 8 Shell: fish v: 3.6.0 default: Bash v: 5.1.16
  running-in: konsole inxi: 3.3.24
Garuda (2.6.14-1):
  System install date:     2022-04-12
  Last full system update: 2023-02-13
  Is partially upgraded:   No
  Relevant software:       snapper NetworkManager mkinitcpio
  Windows dual boot:       Probably (Run as root to verify)
  Failed units:            bluetooth-autoconnect.service shadow.service 

Do you need to add the subnet the peer is on to the allowed IPs? WireGuard - ArchWiki

Point-to-site

To access the network of a peer, specify the network subnet(s) in allowed-ips in the configuration of the peers who should be able to connect to it. E.g. allowed-ips 10.0.0.2/32,fdc9:281f:04d7:9ee9::2/128,192.168.35.0/24,fd7b:d0bd:7a6e::/64.

Make sure to also set up the routing table with ip-route(8). E.g.:

# ip route add 192.168.35.0/24 dev wg0 # ip route add fd7b:d0bd:7a6e::/64 dev wg0
2 Likes

Thank you.

I'm trying to understand it, and set it up.

The thing in there is: why is it working from Android and from Windows without additional settings?

All clients are in the same network, using the same ip range, gateway.....