On redhat 7.4 wireguard not working

On redhat 7.4 wireguard not working

[Vikas]

[-- Attachment #1: Type: text/plain, Size: 659 bytes --]

The error i get is:


Error: argument "suppress_prefixlength" is wrong: Failed to parse rule type

Here is the detailed output:


root@freepbx ~# wg-quick up wg0

[#] ip link add wg0 type wireguard

[#] wg setconf wg0 /dev/fd/63

[#] ip address add 10.1.9.4/16 dev wg0

[#] ip link set mtu 1420 dev wg0

[#] ip link set wg0 up

[#] wg set wg0 fwmark 51820

[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820

[#] ip -4 rule add not fwmark 51820 table 51820

[#] ip -4 rule add table main suppress_prefixlength 0

Error: argument "suppress_prefixlength" is wrong: Failed to parse rule type

[#] ip -4 rule delete table 51820

[#] ip link delete dev wg0


--
VK

[-- Attachment #2: Type: text/html, Size: 7426 bytes --]

Re: On redhat 7.4 wireguard not working

[logcabin]

[-- Attachment #1: Type: text/plain, Size: 1237 bytes --]

FWIW, tried this on Debian Stretch, no errors:

0:      from all lookup local
32763:  from all lookup main suppress_prefixlength 0
32764:  from all lookup main suppress_prefixlength 0
32765:  not from all fwmark 0xca6c lookup 51820
32766:  from all lookup main
32767:  from all lookup default


On Wed, Apr 18, 2018, at 3:16 PM, Vikas wrote:
> 
> The error i get is:


> 


> 


> Error: argument "suppress_prefixlength" is wrong: Failed to parse
> rule type> 
> Here is the detailed output:
> 


> 


> root@freepbx ~# wg-quick up wg0


> [#] ip link add wg0 type wireguard


> [#] wg setconf wg0 /dev/fd/63


> [#] ip address add 10.1.9.4/16 dev wg0


> [#] ip link set mtu 1420 dev wg0


> [#] ip link set wg0 up


> [#] wg set wg0 fwmark 51820


> [#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820


> [#] ip -4 rule add not fwmark 51820 table 51820


> [#] ip -4 rule add table main suppress_prefixlength 0


> Error: argument "suppress_prefixlength" is wrong: Failed to parse
> rule type> [#] ip -4 rule delete table 51820


> [#] ip link delete dev wg0


> 
> 
> --
> VK
> _________________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard


[-- Attachment #2: Type: text/html, Size: 11062 bytes --]

Re: On redhat 7.4 wireguard not working

[Jason A. Donenfeld]

You need a newer version of iproute2.

Re: On redhat 7.4 wireguard not working

[Vikas]

[-- Attachment #1: Type: text/plain, Size: 533 bytes --]

Thank you Jason. Your response is very appreciated along with your work on
the wireguard project.

1. Is there a minimum version of iproute2 that is needed?

2. Can that be mention in the dependency.

3. I installed from source and from the suggested rpm method at
https://www.wireguard.com/install/ would it be possible to check for
version for iproute2 and fail with a error message,

Regards,

Vikas



--
VK

On Wed, Apr 18, 2018 at 2:10 PM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> You need a newer version of iproute2.
>

[-- Attachment #2: Type: text/html, Size: 1109 bytes --]

Re: On redhat 7.4 wireguard not working

[Vikas]

[-- Attachment #1: Type: text/plain, Size: 1362 bytes --]

Just when I thought it worked here are more problems:

The steps I followed were:

1. wget
https://rpmfind.net/linux/fedora/linux/releases/25/Everything/x86_64/os/Packages/i/iproute-4.6.0-1.fc25.x86_64.rpm

2. yum install iproute-4.6.0-1.fc25.x86_64.rpm

I installed from fc25 since rhel7 does not have an upgraded iproute package.

3. After installing the iproute 4.6 I do NOT get the error message:

"Error: argument "suppress_prefixlength" is wrong: Failed to parse rule
type"

4. ifconfig shows the wg0 interface.

5. After approx 2 minutes my ssh connection to the machine over the LAN
(eth0) gets disconnected.

6. When I ssh back in to the machine, ifconfig does not show the wg0
interface.


Please help :(



--
VK

On Wed, Apr 18, 2018 at 2:33 PM, Vikas <kedia.vikas@gmail.com> wrote:
>
> Thank you Jason. Your response is very appreciated along with your work
on the wireguard project.
>
> 1. Is there a minimum version of iproute2 that is needed?
>
> 2. Can that be mention in the dependency.
>
> 3. I installed from source and from the suggested rpm method at
https://www.wireguard.com/install/ would it be possible to check for
version for iproute2 and fail with a error message,
>
> Regards,
>
> Vikas
>
>
>
> --
> VK
>
> On Wed, Apr 18, 2018 at 2:10 PM, Jason A. Donenfeld <Jason@zx2c4.com>
wrote:
>>
>> You need a newer version of iproute2.
>
>

[-- Attachment #2: Type: text/html, Size: 1982 bytes --]

Re: On redhat 7.4 wireguard not working

[Lucian Cristian]

[-- Attachment #1: Type: text/plain, Size: 1852 bytes --]

On 19.04.2018 01:01, Vikas wrote:
> Just when I thought it worked here are more problems:
>
> The steps I followed were:
>
> 1. wget 
> https://rpmfind.net/linux/fedora/linux/releases/25/Everything/x86_64/os/Packages/i/iproute-4.6.0-1.fc25.x86_64.rpm
>
> 2. yum install iproute-4.6.0-1.fc25.x86_64.rpm
>
> I installed from fc25 since rhel7 does not have an upgraded iproute 
> package.
>
> 3. After installing the iproute 4.6 I do NOT get the error message:
>
> "Error: argument "suppress_prefixlength" is wrong: Failed to parse 
> rule type"
>
> 4. ifconfig shows the wg0 interface.
>
> 5. After approx 2 minutes my ssh connection to the machine over the 
> LAN (eth0) gets disconnected.
>
> 6. When I ssh back in to the machine, ifconfig does not show the wg0 
> interface.
>
>
> Please help :(
>
>
>
> --
> VK
>
> On Wed, Apr 18, 2018 at 2:33 PM, Vikas <kedia.vikas@gmail.com 
> <mailto:kedia.vikas@gmail.com>> wrote:
> >
> > Thank you Jason. Your response is very appreciated along with your 
> work on the wireguard project.
> >
> > 1. Is there a minimum version of iproute2 that is needed?
> >
> > 2. Can that be mention in the dependency.
> >
> > 3. I installed from source and from the suggested rpm method at 
> https://www.wireguard.com/install/ would it be possible to check for 
> version for iproute2 and fail with a error message,
> >
> > Regards,
> >
> > Vikas
> >
> >
> >
> > --
> > VK
> >
> > On Wed, Apr 18, 2018 at 2:10 PM, Jason A. Donenfeld <Jason@zx2c4.com 
> <mailto:Jason@zx2c4.com>> wrote:
> >>
> >> You need a newer version of iproute2.
> >
> >
>
>
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard

get the src.rpm and build it on rhel, the rpm binary from fedora should 
not work and probably is not working

Regards


[-- Attachment #2: Type: text/html, Size: 4020 bytes --]

Re: On redhat 7.4 wireguard not working

[Lucian Cristian]

[-- Attachment #1: Type: text/plain, Size: 2199 bytes --]

On 19.04.2018 16:19, Lucian Cristian wrote:
> On 19.04.2018 01:01, Vikas wrote:
>> Just when I thought it worked here are more problems:
>>
>> The steps I followed were:
>>
>> 1. wget 
>> https://rpmfind.net/linux/fedora/linux/releases/25/Everything/x86_64/os/Packages/i/iproute-4.6.0-1.fc25.x86_64.rpm
>>
>> 2. yum install iproute-4.6.0-1.fc25.x86_64.rpm
>>
>> I installed from fc25 since rhel7 does not have an upgraded iproute 
>> package.
>>
>> 3. After installing the iproute 4.6 I do NOT get the error message:
>>
>> "Error: argument "suppress_prefixlength" is wrong: Failed to parse 
>> rule type"
>>
>> 4. ifconfig shows the wg0 interface.
>>
>> 5. After approx 2 minutes my ssh connection to the machine over the 
>> LAN (eth0) gets disconnected.
>>
>> 6. When I ssh back in to the machine, ifconfig does not show the wg0 
>> interface.
>>
>>
>> Please help :(
>>
>>
>>
>> --
>> VK
>>
>> On Wed, Apr 18, 2018 at 2:33 PM, Vikas <kedia.vikas@gmail.com 
>> <mailto:kedia.vikas@gmail.com>> wrote:
>> >
>> > Thank you Jason. Your response is very appreciated along with your 
>> work on the wireguard project.
>> >
>> > 1. Is there a minimum version of iproute2 that is needed?
>> >
>> > 2. Can that be mention in the dependency.
>> >
>> > 3. I installed from source and from the suggested rpm method at 
>> https://www.wireguard.com/install/ would it be possible to check for 
>> version for iproute2 and fail with a error message,
>> >
>> > Regards,
>> >
>> > Vikas
>> >
>> >
>> >
>> > --
>> > VK
>> >
>> > On Wed, Apr 18, 2018 at 2:10 PM, Jason A. Donenfeld 
>> <Jason@zx2c4.com <mailto:Jason@zx2c4.com>> wrote:
>> >>
>> >> You need a newer version of iproute2.
>> >
>> >
>>
>>
>> _______________________________________________
>> WireGuard mailing list
>> WireGuard@lists.zx2c4.com
>> https://lists.zx2c4.com/mailman/listinfo/wireguard
>
> get the src.rpm and build it on rhel, the rpm binary from fedora 
> should not work and probably is not working
>
> Regards
>
>
>
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard

more info https://wiki.centos.org/HowTos/RebuildSRPM

Regards


[-- Attachment #2: Type: text/html, Size: 5153 bytes --]

Re: On redhat 7.4 wireguard not working

[Germano Massullo]

I am using Wireguard on CentOS 7.4 by many months
iproute-3.10.0-87.el7.x86_64
wireguard-dkms-0.0.20180413-1.el7.centos.noarch
wireguard-tools-0.0.20180413-1.el7.centos.x86_64

$ dkms status
wireguard, 0.0.20180413, 3.10.0-693.21.1.el7.x86_64, x86_64: installed

In my system, Wireguard network interface is handled as a systemd service

# systemctl status wg-quick@wg0.service
● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0
   Loaded: loaded (/usr/lib/systemd/system/wg-quick@.service; enabled;
vendor preset: disabled)
   Active: active (exited) since gio 2018-04-19 18:07:01 CEST; 1h 1min ago
     Docs: man:wg-quick(8)
           man:wg(8)
           https://www.wireguard.com/
           https://www.wireguard.com/quickstart/
           https://git.zx2c4.com/WireGuard/about/src/tools/wg-quick.8
           https://git.zx2c4.com/WireGuard/about/src/tools/wg.8
  Process: 1059 ExecStart=/usr/bin/wg-quick up %i (code=exited,
status=0/SUCCESS)
 Main PID: 1059 (code=exited, status=0/SUCCESS)

apr 19 18:07:00 vpn systemd[1]: Starting WireGuard via wg-quick(8) for
wg0...
apr 19 18:07:00 vpn wg-quick[1059]: [#] ip link add wg0 type wireguard
apr 19 18:07:01 vpn wg-quick[1059]: [#] wg setconf wg0 /dev/fd/63
apr 19 18:07:01 vpn wg-quick[1059]: [#] ip address add **removed by me**
dev wg0
apr 19 18:07:01 vpn wg-quick[1059]: [#] ip link set mtu 1420 dev wg0
apr 19 18:07:01 vpn wg-quick[1059]: [#] ip link set wg0 up
apr 19 18:07:01 vpn systemd[1]: Started WireGuard via wg-quick(8) for wg0.