u/Temporary-Cherry-282

I was struggling with troubleshooting a WireGuard issue from one Gl.inet Beryl AX to a Slate AX and a Brume 3 VPN server. After a bit of screaming and yelling, I found that the Beryl's routes were being advertised to the Tailnet, they were showing in both the Slate and Brume. TailScale was bound to the Beryl, but TailScale was disabled. Also, another Beryl I have was unplugged and in a travel case, I was seeing its routes on the Slate and Brume as well.

While the WireGuard tunnels worked for the internet, any local ranges on the Slate and Brume LAN side were not reachable. I checked the TailScale portal, removed the advertisement, and everything worked.

Shouldn't TailScale only advertise routes of connected devices? If a device is disconnected, it should not be advertising to or within the Tailnet. Not sure if it is a bug.

More info on my issue is in the link above or here.

EDIT: I do have Tailscale running on a couple of Windows PCs. None of them show the advertised routes.

TailScale versions
Brume 3 1.98.5 Linux 5.4.281
Slate AX 1.98.8 Linux 4.4.60
Beryl AX 1.98.8 Linux 5.4.211

I just installed a new Brume 3 and reconfigured my Slate AX to handle VPN server duties. I have tested everything on several devices, phones, laptops, etc, and it has worked. I added the conf files to a remote Beryl AX, and internet traffic worked fine, but anything to the LAN on the WG server side is being dropped. This still works fine on the other devices.

I put the original VPN back in place, but it is now having the same issue. So I am assuming something changed in the FW of the remote Beryl when I added the new client configs. I have verified that 0.0.0.0/0 and ::/0 are on the server and client sides. I am unable to reach anything on the LAN side of the WG servers by IP, so it is not a DNS issue.

The only other change I made was adding GoodCloud to the Beryl AX. I do have policy mode in place from the previous VPN configs. All tunnels are set to "All clients" to "All targets".

Below is from the remote Beryl. It is 8000 miles away, so I have to make it work remotely via GoodCloud or TeamViewer.

https://preview.redd.it/0lu7v9mr7oah1.png?width=957&format=png&auto=webp&s=2cf8537bf39bd2d09115c9766dbc2a9b432d92d2

I have searched Reddit and Google, but it seems a lot of the issues are with WiFi. I am not using WiFi on mine. It is only used as a WireGuard server and Tailscale. I am currently on 4.6.11. Is it stable enough to use, or should I hold off based on my requirements?

I searched, but I want to clarify a couple of things.

I want to put my Slate AX behind my current router to use as a redundant VPN server (WireGuard and Tailscale). Is it best to do it as a drop-in gateway? All of my internal clients will use the current router; the Slate AX will only be for terminating the inbound tunnels.

If drop-in gateway is the best option, do I lose the use of the 2 LAN ports on it? Is management handled via the WAN port on the private network? Will configurations carry over or will they be lost?

Are there other/better options that don't include putting it as the main gateway on the public side? Although that could be an option since I have a /29 of static IP addresses and I could reallocate one if needed.

If I want to use my own DNS to point to the endpoint on the WireGuard VPN server, what is the best way to configure this during initial setup to prevent having to rebuild if it is moved to a new location or IP address? I could probably do DDNS and do a CNAME on my DNS server.

EDIT: I think the best option is to reallocate one of my IP addresses and put the Slate AX public-facing. I will reset the Slate AX and start with a new config from scratch. That will be the simplest to implement and with the best results. I can then kill the port forwarding on my current router.

I just unboxed my Brume 3 and performed the upgrade to 4.8.6.

I went through the config, the only thing that was not default, were the IP addresses for the WireGuard server and client peers, I set them to 10.100.10.0/24 (server 10.100.10.1). I can connect, but no traffic is passing to either the local LAN or WAN (some is showing on the Brume, but under 1MB). I have tried setting only local LAN IP ranges, traceroutes to local IP and WAN IP, it appears that all traffic is being dropped.

Below is what my FW looks like. Shouldn't the wgserver be set to forward and possibly add LAN to the destination? I made no changes here, didn't want to make things worse. Not a WRT guy. Hopefully, it is something simple like that.

https://preview.redd.it/4ickm6ene4ah1.png?width=1051&format=png&auto=webp&s=1acc8af1da706ed068e04a32f9f3386359e8ba27

I am currently running WS4W on a Windows box, but due to issues with ICS and a locally hosted DNS server, I need to migrate it to another device. I am considering a GL.inet Brume 3 or Beryl 7 instead.

What is the best way to migrate the server config? I only have a few users, so that is not the issue, but they are located in multiple countries. I want to simplify the migration and not involve someone remote to handle it. Although I could remote into the other locations if needed.

The current server is behind my firewall with port forwarding enabled. I would do the same with the new device. The only other change is that the internal IP would be different. External would stay the same.

I see there is an option on the Slate AX to enter manual keys for public and private. Not sure if that would be the best option to bring over the config.

I am currently running WS4W on a Windows box, but due to issues with ICS and a locally hosted DNS server, I need to migrate it to another device. I am considering a GL.inet Brume 3 or Beryl 7 instead.

What is the best way to migrate the server config? I only have a few users, so that is not the issue, but they are located in multiple countries. I want to simplify the migration and not involve someone remote to handle it. Although I could remote into the other locations if needed.

The current server is behind my firewall with port forwarding enabled. I would do the same with the new device. The only other change is that the internal IP would be different. External would stay the same.

I have been trying to figure out why zone transfers will fail occasionally between the primary and secondary. Also, nslookup against the secondary will fail.

After spending several hours digging into the issue I have found the problem, but not sure how to fix.

Primary is running in Docker on my NAS IP 10.0.10.20
Secondary is running on Win 11 IP 10.0.10.10

After doing DNS client tests from the primary to the secondary, I found that TCP works, UDP fails every time. Same issue from any client as well.

My secondary is a special creature. It is a PC running the following
NIC 1 10.0.10.10 with full routing table and gateway
Wireguard Server (WS4W) with ICS
Tailscale

NIC 2 10.0.12.6 has no gateway and is on the VLAN with my cameras. This is to minimize RTSP traffic across my router between BlueIris and the cameras
BlueIris

ICS also uses UDP 53 which is causing DNS requests to fail due to the port conflict. If I disable ICS, UDP works immediately.

https://preview.redd.it/ac9kj8nuv79h1.png?width=1142&format=png&auto=webp&s=a72a132412495cf7931e58a867c43f50f49d1c3b

Any suggestions on how I can make this work?

EDIT: I ordered a GL.inet Brume 3 to take over the VPN duties. That should fix the issue, as ICS won't be needed any longer.

Need to convince the wife that I need a redundant NAS for data security, then I can move my secondary DNS to it, and of course keep a redundant copy of my data there.

I am considering changing my plan to get the 2-year upgrade-ready option. We have 6 lines on Military MAX, and I am considering the Experience More Military plan.

It is roughly $30 cheaper a month for Experience More, minus taxes and fees. Based on my current plan, TMO says I am saving about $7 a month for taxes and fees. So, roughly $23 savings a month.

If I change plans, how long do I have to wait to start upgrading my device(s)? Is there a waiting period? I have been with TMO for about 12 years.

Am I missing something obvious? There must be a catch somewhere.

https://preview.redd.it/24wupjhrda6h1.png?width=1096&format=png&auto=webp&s=d00d4a77f52d7cdd05e5aa3acd8c0ef1f7a2b35c

I have some 8GB DDR5 RAM sticks from a Dell laptop. I was considering using two of them to upgrade my 4800+. They are SK Hynix and, based on the specs, should be compatible. Has anyone used this to upgrade their NAS?

I plan to remove the stock RAM and use 2x 8GB from the Dell laptop. There may be a set of 2x16GB of the same coming my way soon, so I may hold off for them.

For the past few months, I have noticed that in the Sync and Backup app, it doesn't show the PC name anymore. It would occasionally fix itself if I changed the selection on the left side. Doesn't do it now. See screenshot

https://preview.redd.it/isrnt1iowz2h1.png?width=868&format=png&auto=webp&s=3e1e43c29d0c1914b68536a7f7e8caf7aae63be5

Any suggestions? I have tried logging out of PC, rebooting, still shows the [object Object]. In the overview, it shows correctly.

The sync works as it should, so it still functions. It is just an OCD thing for me.

I have run into issues with my Docker config going TU on previous UGOS upgrades. I was traveling for about 5 months and avoided all upgrades to minimize issues while remote. I am currently on 1.12.1.0002. See previous issues HERE

Typically, I will lose MACVLAN settings and have to delete the Docker network database and reconfigure each container to get them working again. Should I stop Docker, do the upgrade, and then re-enable it? UGreen said it is a known Docker issue and is not limited to UGOS.

Any workarounds to help me avoid headaches so I can get to a more current version?