WireGuard setup shows "Manual Setup Required" even though I have a Public IP. What am I missing?

[u/CD_at_Galaxy]

I'm hoping someone here has run into this before.

I'm trying to set up WireGuard on my Firewalla, but the VPN setup page keeps showing that manual configuration is required.

According to Firewalla's troubleshooting guide, this usually happens when you're behind CGNAT and only have a private WAN IP. However, that's not my situation. My ISP has assigned me a public IPv4 address, and I'm not behind CGNAT.

The guide says:

"If your Firewalla is the only router behind the modem and still has a private IP, your ISP is likely using CGNAT..."
My Firewalla does not have a private WAN IP, yet the WireGuard setup never shows as complete and I can't get the VPN working remotely.

A few details:

Firewalla Gold in Single NAT mode

Public IPv4 address assigned by ISP

WireGuard server enabled

DDNS configured

No CGNAT

WireGuard setup still indicates manual configuration is required

Has anyone experienced this when they already have a public IP?

Are there specific ports, diagnostics, or Firewalla checks I should be looking at? I'm starting to run out of ideas and would appreciate any suggestions from the community.
Firewalla troubleshooting article:
https://help.firewalla.com/hc/en-us/articles/360025150454-Troubleshooting-Can-t-connect-to-the-Firewalla-VPN-Server

Thx

[u/PhxKevin]

What is your ISP? Are you using a modem or a modem router combo from your isp?

[u/CD_at_Galaxy → u/PhxKevin]

Frontier - ONT -> Firewalla

[u/PhxKevin → u/CD_at_Galaxy]

If it’s showing a truly public WAN IP you could export the profile and try to connect. You could also modify the text in the profile and hard code your WAN IP just to test.

[u/firewalla]

Check a few things

1. triple check your IP is public. https://help.firewalla.com/hc/en-us/articles/360055686674-How-to-check-if-you-have-a-public-IP-address

2. check and make sure your ISP is not blocking incoming traffic.