RUTX11 07.11.3 wireguard firewall section

Hello,

Stopping and restarting a wireguard interface creates a firewall zone named wireguard if it isn’t already present and containing the wg interface name in the list of covered networks, and masquerade enabled.
This zone is created even if another one containing the same interface in the covered networks list exists and has masquerading disabled and different inter-zone forwarding configurations.
Of course routing will then fail if the local wg network isn’t in the Allowed IPs list of all the other routers in the network.

Workaround: keep this zone present, remove the wg interface name from the list of covered networks and it will not interfere with the expected flows.

Fix: don’t create this zone if another one with the same covered interface already exists.

Regards,

Hello @flebourse ,

Thank you for notifying us of the issue! I’ve replicated it and reported it to our RnD team for further consideration.

Best regards,

This topic was automatically closed after 60 days. New replies are no longer allowed.

Hi @flebourse,

I was informed, that this issue is planned to be addressed in RutOS 07.15.

Perfect thank you.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.