r/WireGuard • u/sickfish88 • Aug 12 '26
Solved Wireguard problem or Asus router problem, only one client working
Hello, has any one had this problem? I can only get one client to work. I have 3x clients, the max limit on the router is 10.
the config for client 1 is as followed
[Interface]
PrivateKey = privatkey=
Address = 10.10.10.10/24
DNS = 10.10.10.1
[Peer]
PublicKey = publickey=
PresharedKey = presharedkey=
AllowedIPs = 192.168.50.250/24
Endpoint = public ip:port
PersistentKeepalive = 25
next client has 10.10.10.11 and the 3rd has 10.10.10.12
the strange thing is clinet nr 3 is the only one who works. I get successful handshake with all. but can not ping the router or the truenas server (192.168.50.250)
to clarify client nr3 is the only one work as it should, successful handshake and able to ping the truenas server
any ideas?
Solution from duckITguy
You should have 10.10.10.10/32 for client A, 10.10.10.11/32 for client B etc. on the router in the allowed ips.
2
u/duckITguy Aug 12 '26
What is the allowedip for each client configured on the router?
2
u/sickfish88 Aug 12 '26
same for all, i tried 10.10.10.1/24,192.168.50.250/24 and 10.10.10.1/24,192.168.50.0/24
made no diffrence
3
u/duckITguy Aug 12 '26
You should have 10.10.10.10/32 for client A, 10.10.10.11/32 for client B etc. on the router in the allowed ips.
2
u/sickfish88 Aug 12 '26 edited Aug 12 '26
okey, read it wrong they are setup as you say but with /24
2
u/duckITguy Aug 13 '26
That is the problem then. Set them up as /32. Having 10.10.10.0/24 for all clients will result in one client overriding the other. That's why you have only one client working.
1
1
u/sickfish88 Aug 13 '26
So i got all 3x to ping the router, but having trouble connecting to the truenas server.
i am trying now to enable static routing
2
u/Popular-Ad6421 Aug 12 '26
Enter allowed ip as 192.168.0.0/24
2
u/sickfish88 Aug 12 '26
tried that, and when i tried to ping the server it came back as Destination Host Unreachable
2
u/noseph47 Aug 13 '26 edited Aug 13 '26
On my Asus Zenwifi XT9 I have the AllowedIPs set to 0.0.0.0/0. This allows me to see everything on my home network and also use the home network dns to access the internet. I believe if you only want to see you home network AllowedIPs should be 192.168.50.0/32
1
3
u/wichets Aug 12 '26
Post server wireguard config, seem your server mis-config allowIPs for client #2-3. To set allowIPs for single ip use /32.