search

Lochnair / vyatta-wireguard

GNU General Public License v3.0
705 stars 37 forks source link

Unifi/USG4: Traffic stops on every provision #81

Open mbello opened 6 years ago

mbello commented 6 years ago

Ok, I have successfully set a hub-and-spoke site-to-site VPN using wireguard and the software released here. Thanks for that!

The problem I have right now is that the hub in the hub and spoke topology is a USG-PRO (USG4) and will make traffic stop everytime it is provisioned. Looking at the log, the only thing I see is reproduced below. Maybe when the USG has the pppoe0 interface restarted it somehow breaks wireguard?

I added "--" where I sanitized it: Nov 14 18:09:12 USGLimeira pppd[21080]: pppd 2.4.4 started by root, uid 0 Nov 14 18:09:12 USGLimeira pppd[21080]: Connected to 88:66:39:--:--:-- via interface eth2 Nov 14 18:09:12 USGLimeira pppd[21080]: Connect: ppp0 <--> eth2 Nov 14 18:09:12 USGLimeira zebra[686]: interface ppp0 index 28 <POINTOPOINT,NOARP,MULTICAST> added. Nov 14 18:09:12 USGLimeira zebra[686]: interface ppp0 mtu changed from 1500 to 1492 Nov 14 18:09:12 USGLimeira pppd[21080]: PAP authentication succeeded Nov 14 18:09:12 USGLimeira pppd[21080]: peer from calling number 88:66:39:--:--:-- authorized Nov 14 18:09:12 USGLimeira pppd[21080]: Unsupported protocol 'IPv6 Control Protovol' (0x8057) received Nov 14 18:09:12 USGLimeira zebra[686]: warning: PtP interface ppp0 with addr 191.---.---.---/32 needs a peer address Nov 14 18:09:12 USGLimeira zebra[686]: interface index 28 was renamed from ppp0 to pppoe0 Nov 14 18:09:12 USGLimeira pppd[21080]: local IP address 191.---.---.--- Nov 14 18:09:12 USGLimeira pppd[21080]: remote IP address 200.100.88.--- Nov 14 18:09:12 USGLimeira zebra[686]: interface pppoe0 index 28 changed <UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>. Nov 14 18:09:14 USGLimeira kernel: net_ratelimit: 5 callbacks suppressed Nov 14 18:09:15 USGLimeira ubnt-service-gui: starting the GUI service. Nov 14 18:09:15 USGLimeira zebra[686]: interface ifb_pppoe0 index 29 <BROADCAST,NOARP> added. Nov 14 18:09:15 USGLimeira kernel: HTB: quantum of class 10010 is big. Consider r2q change. Nov 14 18:09:15 USGLimeira zebra[686]: interface ifb_pppoe0 index 29 changed <UP,BROADCAST,RUNNING,NOARP>.

Side note: would be able if you could share how we could restart the wg service (reconfigure all wg interfaces) so that I could restore service without having to reboot the gateway. Is there an easy way to to it from the USG CLI? I wsh we had a service restart wireguard...

mbello commented 6 years ago

By the way, when I say traffic stops I mean it dies for good, until I reboot the USG then it comes back again.

mafredri commented 5 years ago

@mbello I had the same issue when I configured my USG3 on the USG itself (configure / commit / save). After I moved all my wireguard configuration to config.gateway.json I no longer had the issue.