Problems on MacOS (Mojave)
Shankar Ramamoorthy
shankar at me.com
Tue Dec 25 12:54:56 CET 2018
Installed Wireguard via MacPorts on machine running macOS Mojave 10.14.2.
It worked the very first time, but haven't been able to get it to work
since.
Any help or suggestions appreciated. Gory details below.
Machines: 192.168.11.44 (macos, 192.168.1.2) and 192.168.11.15 (Debian,
192.168.1.1)
I know that Wireguard on the Debian box is working properly because I
can connect to it from a different peer.
macos config:
[Interface]
Address = 192.168.1.2/24
PrivateKey = kJbWLVX6tj+PxV9eKTZ0g4akHiPFOreUwsqsDrRXJmo=
ListenPort = 2200
[Peer]
PublicKey = H+RLiowROj143Xjn/P87R4qcSmt+X7ROaPVzXYrYb1U=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = 192.168.11.15:2200
# This is for if you’re behind a NAT and want the connection to be kept
alive.
PersistentKeepalive = 25
Debian config:
[Interface]
PrivateKey = uMZzy458hweehyFfD4PenKwsH1/bKHSn0ayOWLknl2U=
ListenPort = 2200
[Peer]
PublicKey = uM3OykF94Ior3CnRudN6AwH4zNqN8Vh7CwcuwQaCt3E=
AllowedIPs = 0.0.0.0/0
Endpoint = 192.168.11.44:2200
# This is for if you’re behind a NAT and want the connection to be kept
alive.
PersistentKeepalive = 25
Output of "sudo wg-quick up ~/.config/wireguard/wg0.conf":
INFO: (utun1) 2018/12/25 03:47:35 Starting wireguard-go version 0.0.20181222
[+] Interface for wg0 is utun1
[#] wg setconf utun1 /dev/fd/63
[#] ifconfig utun1 inet 192.168.1.2/24 192.168.1.2 alias
[#] ifconfig utun1 up
[#] route -q -n add -inet6 ::/1 -interface utun1
route: writing to routing socket: Network is unreachable
[#] route -q -n add -inet6 8000::/1 -interface utun1
route: writing to routing socket: Network is unreachable
[#] route -q -n add -inet 0.0.0.0/1 -interface utun1
[#] route -q -n add -inet 128.0.0.0/1 -interface utun1
[#] route -q -n add -inet 192.168.11.15 -gateway 192.168.11.1
[+] Backgrounding route monitor
ifconfig for utun0 and utun1:
utun0: flags=8050<POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::6431:138d:3530:c696%utun0 prefixlen 64 scopeid 0xb
inet 192.168.1.2 --> 192.168.1.1 netmask 0xffffff00
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1420
inet 192.168.1.2 --> 192.168.1.2 netmask 0xffffff00
Output of "netstat -an | grep utun":
netstat -rn | grep utun
0/1 utun1 USc 67 0
utun1
128.0/1 utun1 USc 2 0
utun1
192.168.1.2 192.168.1.2 UH 0 0
utun1
default fe80::%utun0
UGcI utun0
fe80::%utun0/64 fe80::6431:138d:3530:c696%utun0
UcI utun0
fe80::6431:138d:3530:c696%utun0 link#11
UHLI lo0
ff01::%utun0/32 fe80::6431:138d:3530:c696%utun0
UmCI utun0
ff02::%utun0/32 fe80::6431:138d:3530:c696%utun0
UmCI utun0
Both "ping 192.168.1.1" and "ping 192.168.1.2" report Request timeout.
I'm also not able to get rid of the utun0 interface, which did not exist
before Wireguard I think.
Shankar
More information about the WireGuard
mailing list