You are not logged in.

#1 2025-08-13 13:54:36

fluffy-bunny
Member
Registered: 2016-04-17
Posts: 38

Connection to Wireguard-VPN with 'nmcli' / 'nm-applet' failed, why?

Hi there!

I try to connect with my Wireguard-VPN over 'nmcli' and I've configured it in 'nm-applet'.

When I open the connection I got my VPN-IP (10.0.0.3/32) and can see it in 'ip a' but I can't connect to any devices in my homelab.

The Output of 'ip a' is this:

14: HomeWG: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    link/none
    inet 10.0.0.3/32 scope global noprefixroute HomeWG
       valid_lft forever preferred_lft forever

...and in 'journalctl -u NetworkManager.service' I can see the following:

Aug 13 15:27:26 thinkpad-t14 NetworkManager[993]: <info>  [1755091646.8847] manager: NetworkManager state is now CONNECTED_SITE
Aug 13 15:27:26 thinkpad-t14 NetworkManager[993]: <info>  [1755091646.8875] device (wlp3s0): Activation: successful, device activated.
Aug 13 15:27:27 thinkpad-t14 NetworkManager[993]: <info>  [1755091647.0819] manager: NetworkManager state is now CONNECTED_GLOBAL
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8311] device (HomeWG): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8327] device (HomeWG): state change: unavailable -> disconnected (reason 'user-requested', managed-type: 'full')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8334] device (HomeWG): Activation: starting connection 'HomeWG' (6g96d60g-8115-41a6-83b3-3d89d5402366)
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8335] audit: op="connection-activate" uuid="6g96d60g-8115-41a6-83b3-3d89d5402366" name="HomeWG" pid=1204 uid=1000>
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8336] device (HomeWG): state change: disconnected -> prepare (reason 'none', managed-type: 'full')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8339] device (HomeWG): state change: prepare -> config (reason 'none', managed-type: 'full')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8342] device (HomeWG): state change: config -> need-auth (reason 'none', managed-type: 'full')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8349] device (HomeWG): state change: need-auth -> prepare (reason 'none', managed-type: 'full')
Aug 13 15:27:37 thinkpad-t14 NetworkManager[993]: <info>  [1755091657.8351] device (HomeWG): state change: prepare -> config (reason 'none', managed-type: 'full')
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <info>  [1755091658.1418] device (HomeWG): state change: config -> ip-config (reason 'none', managed-type: 'full')
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <warn>  [1755091658.1693] l3cfg[828ff6d4738ca610,ifindex=14]: unable to configure IPv6 route: type unicast table 52181 ::/0 dev 14 metric>
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <info>  [1755091658.1845] device (HomeWG): state change: ip-config -> ip-check (reason 'none', managed-type: 'full')
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <info>  [1755091658.2264] device (HomeWG): state change: ip-check -> secondaries (reason 'none', managed-type: 'full')
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <info>  [1755091658.2266] device (HomeWG): state change: secondaries -> activated (reason 'none', managed-type: 'full')
Aug 13 15:27:38 thinkpad-t14 NetworkManager[993]: <info>  [1755091658.2275] device (HomeWG): Activation: successful, device activated.

Does anyone have an idea why I've problems to get an connection?

Last edited by fluffy-bunny (2025-08-13 14:04:42)

Offline

#2 2025-08-14 07:02:00

-thc
Member
Registered: 2017-03-15
Posts: 995

Re: Connection to Wireguard-VPN with 'nmcli' / 'nm-applet' failed, why?

The warning just establishes that your WireGuard adapter has no IPv6 connectivity.

First try to ping the VPN endpoint:

ping 10.0.0.1

If that works, the routing on the WireGuard "server" is probably to blame. Does the WireGuard "server" provide the NAT/masquerading rules (and the forwarding) needed for transporting packets outside of the VPN network (10.0.0.0/24)?

Last edited by -thc (2025-08-14 07:03:05)

Offline

#3 2025-08-15 16:43:20

fluffy-bunny
Member
Registered: 2016-04-17
Posts: 38

Re: Connection to Wireguard-VPN with 'nmcli' / 'nm-applet' failed, why?

-thc wrote:

The warning just establishes that your WireGuard adapter has no IPv6 connectivity.

First try to ping the VPN endpoint:

ping 10.0.0.1

If that works, the routing on the WireGuard "server" is probably to blame. Does the WireGuard "server" provide the NAT/masquerading rules (and the forwarding) needed for transporting packets outside of the VPN network (10.0.0.0/24)?

@-thc : Thanks for your reply and help smile!

I've found my problem. I recreated an new Config von OPNSsense - where my Wireguard is running - and imported it again in nmcli with this guide: https://www.cyberciti.biz/faq/how-to-im … -on-linux/

Now it's working fine smile.

Thanks for your help again

Offline

#4 2025-08-16 06:57:20

-thc
Member
Registered: 2017-03-15
Posts: 995

Re: Connection to Wireguard-VPN with 'nmcli' / 'nm-applet' failed, why?

Nice - please remember to mark your thread as solved by editing the title.

Offline

Board footer

Powered by FluxBB