Fw 7.11 can't edit wireguard peer in web interface

NETWORKING SOLUTIONS
1

fw 7.11 can’t edit wireguard peer in web interface after upgrade from 7.10.2 with keep settings.
trb140, rutx09 & rutc50

3

Hello,

Thank you for reaching out.

I’ve tested the behavior you described on an RUTC50 after updating from 7.10.2 to 7.11 and did not encounter any issues. I was able to edit the WireGuard instance and peers’ configuration without any problems.

Have you tried performing a factory reset on the device and reconfiguring the peer? Does this issue still persist after a reset?

Best regards,

4

No, please let me know how to do that with remote devices without loosing the connection.

5

You can factory reset the device remotely using the SMS Utilities feature, provided the mobile WAN connection is active. To do so, send the following SMS command to the router:

<admin password> restore – where admin password stands for your current device password used to log in to WebUI.

Please note that this process will erase all configurations, and the device will briefly go offline for approximately 1-2 minutes during the reset.

Best regards,

6

Thanks but no thanks. That will be last thing I will ever hear from it. Unless you will pay for my travel and stay to revive it? Or do I miss something clever?

7

I can reset my devices to factory defaults, after a reboot they will show up in RMS again and I can configure everything from there.
No need to travel.

8

Thx, will the pin code sim card survive the factory reset?

9

Be careful with PIN code!
Ideally you always disable PIN code of the SIM before you place the device off-site.
Exactly for that reason.

10

What I was afraid of.

Is it possible to disable the pin code of a sim card? Remote sites usual provide me with a sim card and pin code… I guess it’s the provider of the simcard who has to disable that?

Anyway. I would expect an upgrade to be compatible with existing configuration. No problem when the configuration is changed or enhanced but that should be part of the (configuration) upgrade imho?

11

What I do: I stick the SIM in a cheap old Nokia phone and disable the PIN.
Then the card can easily go off-site.

From the docs:

image

12

thx, good to know.
Still won’t take the risk reseting the device. When I find time I’ll try if I can recreate/find the prob. Or wait for the next upgrade.

13

All clear - good luck mate :+1:

14

Good morning @michiel ,

Just to be clear there is three type of restores that are possible in our devices:

System reset - when all settings are cleared except for RMS data, mdcollect database, logs and PIN code.
Factory reset - Resets device to factory configuration. It means everything will be restored without any exclusions
User’s default configuration - Resets device to user’s default configuration.

https://wiki.teltonika-networks.com/view/RUTX11_Maintenance#Reset_Settings

So using System reset your PIN code will be intact after restore

What is more if you want to have an extra level of insurance for PIN code part you can use inbuilt function to remove PIN code from SIM card. It can be found in Network → Mobile → Utilities → SIM management

Also returning to your main problem I would like to ask if this was your first upgrade or you had several upgrades with keep settings? For example: from 7.8 → 7.9 → 7.10.2 → 7.11 If so maybe you remember how many updates like that and from what versions it was completed. As this might be the reason why we can not replicate the problem.

Sincerely,
Eligijus

15

Hi Eligijus,

Thanks for this excellent overview, this is valueable info I didn’t know, appreciated!

I can confirm my first upgrade(s) is indeed old(ish). The newest device exhibiting this problem is an aug 24 installed rutc50 so I guess that was using 7.08.2 and has been kept up2date since. Trb140 & rutx09’s are much older.

I could understand issues with exisitng configuration when skipping upgrades. But I’d expect/hoped this would not be the case when doing not skipping upgrades?

So the recommended factory reset is in my case NOT a good idea. Becasue I’m not using rms the system reset isn’t an option either. So that leaves a user default config reset but something tells me this is more or less the same as doing the upgrade?

Besides loosing remote connection is too expensive to trust on these, possible, brittle methods. A flawless track record of updates would give me trust but the simple fact configuration update isn’t handled correctly won’t. And there we are.

I’ll see if I can recreate the wireguard config from cli and see what changes borked the html config. Any hints welcome.

thx.

16

I’ve tried the following without succes:

  1. a rutx09 @fw 7.10.2 works (vps peer is editable in web)
  2. @fw 7.11 rm wg config, add wg, failed to add peer (in web)
  3. @fw 7.11 create user default config, reset to user dflt. no change
    4. did factory reset, still not able to edit wg-peer in web

I think tt has some work to do.

17

Have the same problem with my RUTX50, which is fairly new (09/24 I think), so not that many updates.
This is now really bothering me, because Tailscale also doesn’t work with 07.11 (see Upgraded to 7.11, Tailscale issues). I also can’t setup a Wireguard connection as an alternative now? Seriously? I thought Teltonika made industrial grade hardware and I expected them to test each end every aspect before firmware aspect—but especially anything related to remote connection.
I don’t know if I can recommend them for widespread usage in our company now, good thing I only bought one first.

18

Hello,

Thank you for providing additional information.

To investigate and troubleshoot this issue further, I’ve sent you a form to fill out. Please use “10672” as the ticket ID. Once submitted, we’ll contact you privately to assist with resolving the problem.

Best Regards,

19

Thx for the info. Just be careful with updates. You have to make sure yourself if the update is fully functional. Otherwise stay with current version. Tt is slowly getting slightly better at it.

20

I am also unable to edit Wireguard peers after upgrading my RUT956 to RUT9M_R_00.07.11.2

Has anyone gotten around this? My remote site is broken right now.

@Martynas is Teltonika on the case with a fix soon?

21

Hello,

I’d like to investigate and troubleshoot it further, as I haven’t observed the mentioned behavior when editing WireGuard peer on the RUT956 after upgrading to firmware version 7.11.2.

To proceed, I’ve sent you a form to fill out. When completing it for the ticket ID, please use 10672-1. Once it’s submitted, we’ll contact you privately to assist you with further issue’s troubleshooting.

Best regards,