Hi, I’m having a problem with WireGuard. I have two locations connected, and every now and then the connection drops. When I log into the iFire, it shows that the WireGuard connection is active, but nothing works. If I disconnect and reconnect, everything works fine again. Does anyone have any ideas?
For s2s connections, ipsec is a better solution
Hello @anwin ,
The UI might indicate that the interface is initialized, not that the tunnel is actively passing packets or that the handshake is valid.
I tried to identify if IPFire has any sort of validation of packets being exchanged via the tunnel and this is what I found.
Looking at wireguard-functions.pl I did not identified any function that monitor PersistentKeepalive which might be the case for your observed behaviour: the UI shows the connection “ON” based solely on interface status (up) w/o checking if packets still flow through it.
Please check N2N config, slot 12 (aka index 12) in that config file - that slot should be the keepalive param. If that is empty (i.e. not initialized by UI) you can set it as 25 on both sides and see if that trigger the automated restart of the tunnel when it breaks.
All above are based on wireguard-functions.pl- how IPFIre writes and loads the WG N2N config.