jstricker
Goto Top

Wireguard VPN on UDM Pro behind Fritzbox - Handshake did not complete

Hello everyone

I have the following problem:

I have set up the Wireguard server on my UDM Pro, on the client conf i changed the endpoint to the ddns name who is configured on the fritzboxbut I get on the client "handshake did not complete".

My Setup:

ISP -> FritzBox 7590 -> UDM Pro (double nat)

Fritzbox: 192.168.2.1

On the fritzbox wireguard port forwarding to udm pro (192.168.2.10)

Udm pro: 192.168.1.1

Firewall subnet 192.168.120.0/24

Firewall rules on udm pro Internet in/out/local on any:any

Did anyone have an Idee what else is to do that i got an Connection with my VPN client?

Content-ID: 71575413347

Url: https://administrator.de/contentid/71575413347

Ausgedruckt am: 24.11.2024 um 06:11 Uhr

radiogugu
radiogugu 18.04.2024 um 22:23:53 Uhr
Goto Top
Evening.

This does not add up:

On the fritzbox wireguard port forwarding to udm pro (192.168.2.10)

Udm pro: 192.168.1.1

Which IP is configured on the UDM Pro interface responsible of Wireguard?

Please make a drawing of your network.

Please post the Wireguard config with relevant bits anonymized.

Regards
Marc
jstricker
jstricker 19.04.2024 um 07:32:42 Uhr
Goto Top
Thats my configs:
screenshot_20240419_072825_wireguard
screenshot_20240419_072706_chrome
screenshot_20240419_072719_chrome
aqui
aqui 19.04.2024 aktualisiert um 10:52:40 Uhr
Goto Top
Udm pro: 192.168.1.1, Firewall subnet 192.168.120.0/24
This statement is totally confusing. face-sad
The Fritzbox-firewall coupling port is the UDM WAN interface which is, regarding to your description, 192.168.2.10.
So does this mean you have 2 local LAN networks on your UDM or is one just the internal Wireguard adressing?
Helpful for a focused troubleshooting here would be both, the WG server and client config file!

All further details and ToDos you'll find in the local Wireguard Tutorial!