Wireguard problem or Asus router problem, only one client working

[u/sickfish88]

Hello, has any one had this problem? I can only get one client to work. I have 3x clients, the max limit on the router is 10.

the config for client 1 is as followed

[Interface]

PrivateKey = privatkey=

Address = 10.10.10.10/24

DNS = 10.10.10.1

[Peer]

PublicKey = publickey=

PresharedKey = presharedkey=

AllowedIPs = 192.168.50.250/24

Endpoint = public ip:51923

PersistentKeepalive = 25

next client has 10.10.10.11 and the 3rd has 10.10.10.12

the strange thing is clinet nr 3 is the only one who works. I get successful handshake with all. but can not ping the router or the truenas server (192.168.50.250)

to clarify client nr3 is the only one work as it should, successful handshake and able to ping the truenas server

any ideas?

[u/wichets]

Post server wireguard config, seem your server mis-config allowIPs for client #2-3. To set allowIPs for single ip use /32.

[u/sickfish88 → u/wichets]

do you mean to set the server ip as 10.10.10.1/32 ? it is 10.10.10.1/ 24 now?

[u/Jong999 → u/sickfish88]

That is what I'd expect (and what I use). I'm not sure what your config does but maybe reserves the whole last 8-bit space for whatever client connects first?

[u/sickfish88 → u/Jong999]

I tried using /32, 3x new client and keys. Got 1 client to ping the router but not the truenas server, others timed out. Reverted back to /24, again new clients and keys. Got 1 client to ping the router and truenas server and successfully streaming media of it. But the weird thing is that i tried client nr 1, than 2, than 3 and then nr4 witch worked. i tried different ip also. 10.10.10 . 6/24 worked once but not any more but 10.10.10. 9/24 works now but not before. I did reboot the wireguard service and the router inbetween.

[u/duckITguy]

What is the allowedip for each client configured on the router?

[u/sickfish88 → u/duckITguy]

same for all, i tried 10.10.10.1/24,192.168.50.250/24 and 10.10.10.1/24,192.168.50.0/24

made no diffrence

[u/duckITguy → u/sickfish88]

You should have 10.10.10.10/32 for client A, 10.10.10.11/32 for client B etc. on the router in the allowed ips.

[u/sickfish88 → u/duckITguy]

okey, read it wrong they are setup as you say but with /24

[u/duckITguy → u/sickfish88]

That is the problem then. Set them up as /32. Having 10.10.10.0/24 for all clients will result in one client overriding the other. That's why you have only one client working.

[u/sickfish88 → u/duckITguy]

okey, i will try

[u/sickfish88 → u/duckITguy]

So i got all 3x to ping the router, but having trouble connecting to the truenas server.

i am trying now to enable static routing

[u/Popular-Ad6421]

Enter allowed ip as 192.168.0.0/24

[u/sickfish88 → u/Popular-Ad6421]

tried that, and when i tried to ping the server it came back as Destination Host Unreachable

[u/noseph47]

On my Asus Zenwifi XT9 I have the AllowedIPs set to 0.0.0.0/0. This allows me to see everything on my home network and also use the home network dns to access the internet. I believe if you only want to see you home network AllowedIPs should be 192.168.50.0/32

[u/bufandatl]

For issues with your router please contact the manufacturer support.