QVPN - wireguard

English Compatibility
1

I have a Qnap TS-264 and the QVPN service installed. I’m having trouble with WireGuard because I can’t generate a key pair. It seems to be frozen.

Unfortunately, uninstalling this add-on doesn’t provide a positive solution either.

2

Can you provide some details on your setup? Based on what you said there is not much help we can offer…

3

Thank you for your feedback! Regarding the configuration, we recommend referring to this official FAQ article first. If the issue persists after following the guide, could you please provide more details along with screenshots of the error or relevant settings?

This will help us troubleshoot the cause more accurately. Thank you!

How to Configure WireGuard VPN Server and Client Settings in QVPN Service 3 | QNAP

4

I can’t refresh my key because WireGuard suddenly stopped working. When I connect via phone, I have no internet or local network. However, data transfer is happening and I see it in the dialog box. It worked for me before. I’m afraid WireGuard has crashed. I tried uninstalling it, but the key is still the same.

5
  1. You may want to disclose your NAS model, firmware version, QVPN versions…
  2. Do you have QuFirewall enabled and configured to not block the VPN ?

https://www.qnap.com/en-us/how-to/faq/article/how-to-setup-qufirewall-to-allow-vpn-connections

  1. Have you tried another protocol and does it work ?

6

My QNAP - TS 264 and I don’t have Qu Firewall.

Could You explain me What the protocols is about?

7

Have you hard Wireguard working previously? The Wireguard key for your NAS will not change. There is a public key and a private key. Wireguard is a connection of peers. In order to connect to your remote device, you need to have a connection set up where your NAS knows the public key of that device. And on your remote device you need to have the public key of your NAS entered.

There’s more IP related items but let’s start first with making sure you have your keys entered properly on both sides of the connection.

8

Have you tried OpenVPN (or other) on QVPN for example? To see if this is a wireguard issue or not

Anyway, you still don’t provide details on your configuration and issue…

9

Wait a minute. If you connect with your phone do are you able to access files on the NAS?

This sounds like a configuration issue. Your key on the QNAP won’t change. You don’t generate a pair on the QNAP. You generate one public key on the QNAP and another on your phone. That is the key pair. The public keys are tied to private keys that you don’t have access to. None of those change.

10

Hello

As I said before, I have no access to either the LAN or WAN. In the dialog box, I see that kilobytes are being transferred.

I think Wireguard has crashed, because with my current settings, everything worked before. You can generate a public key in Wireguard, as there’s an option there. But I can’t change it.
Even after uninstalling WireGuard, I see that it remembers the last settings. Do you know how to permanently delete all files related to WireGuard and reinstall it?

11

I would open a support ticket then with QNAP. If you have tried removing QVPN and reinstalling it and are still having issues, a ticket might be the way to go.

Try this first:

1.) Stop the QVPN service
2.) Reboot the NAS
3.) Delete QVPN
4.) Reboot the NAS
5.) Reinstall QVPN

See if your issue is still there or if it is gone.

12

Just a reminder that WireGuard uses UDP as its transport. So your client will just throw datagrams at the server and has to hope they arrive. Your client may say it’s up, but if anything blocks the traffic, it just won’t work. I learned this the hard way when I patched my VPN VM and forgot to make the firewall rule opening the port persistent. My phone showed data being transferred, but I had no internet because the firewall was dropping the packets.

I’m not sure how the QNAP implementation of WireGuard works…I run mine standalone on a dedicated VM. If you run “ip a” do you see a wg0 device? If you’re on the same network as the NAS, does traffic pass?

Unfortunately, WireGuard doesn’t seem to do a lot of logging. I have mine set with systemctl, so I can see all of the stuff it does when it brings the link up…but there’s no messages about client traffic.