44 connect not registering

Setup Information

Use sudo asl-show-version to obtain this information from the console or SSH

pi@node688580:~ $ sudo asl-show-version
********** AllStarLink [ASL] Version Info **********

OS : Debian GNU/Linux 13 (trixie)
OS Kernel : 6.12.62+rpt-rpi-2712

Asterisk : 22.7.0+asl3-3.7.1-1.deb13
ASL [app_rpt] : 3.7.1

Installed ASL packages :

Package Version
============================== ==============================
allmon3 1.7.0-1.deb13
asl3 3.15-1.deb13
asl3-appliance 2.1.0-2.deb13
asl3-appliance-pi 2.1.0-2.deb13
asl3-asterisk 2:22.7.0+asl3-3.7.1-1.deb13
asl3-asterisk-config 2:22.7.0+asl3-3.7.1-1.deb13
asl3-asterisk-modules 2:22.7.0+asl3-3.7.1-1.deb13
asl3-menu 1.16-1.deb13
asl3-update-nodelist 2.0.0-1.deb13
asl-apt-repos 2.0-1.deb13
cockpit 337-1
cockpit-bridge 337-1
cockpit-networkmanager 337-1
cockpit-packagekit 337-1
cockpit-sosreport 337-1
cockpit-storaged 337-1
cockpit-system 337-1
cockpit-wifimanager 1.2.0-1.deb13
cockpit-ws 337-1
dahdi 1:3.1.0-2.1
dahdi-dkms 1:3.4.0-10.asl.deb13
dahdi-linux 1:3.4.0-10.asl.deb13
dahdi-source 1:3.4.0-10.asl.deb13

Inquiry

Hi-

I have just installed 44 connect, and followed the guidelines at 44Net Connect for ASL

Everything went fine until the last step… the wait 2 minutes and try rpt show registrations which is supposed to show the tunnel address.

Mine still shows the address for the carrier NAT. I can connect out, I believe, but can’t get back into it for managing it.

Any suggestions??

Thanks in advance!!

Ken

See https://allstarlink.github.io/user-guide/troubleshooting/ on how to ask a good question to obtain the quickest and best assistance

You most likely did not open the port on the node, also you need to ensure all the traffic on the node is running threw the vps, this is where I have noticed most people make their mistake.

Please provide the output of asl-node-auth-check.

Here you go:

********** AllStarLink [ASL] Version Info **********

OS : Debian GNU/Linux 13 (trixie)
OS Kernel : 6.12.62+rpt-rpi-2712

Asterisk : 22.7.0+asl3-3.7.1-1.deb13
ASL [app_rpt] : 3.7.1

Installed ASL packages :

Package Version
============================== ==============================
allmon3 1.7.0-1.deb13
asl3 3.15-1.deb13
asl3-appliance 2.1.0-2.deb13
asl3-appliance-pi 2.1.0-2.deb13
asl3-asterisk 2:22.7.0+asl3-3.7.1-1.deb13
asl3-asterisk-config 2:22.7.0+asl3-3.7.1-1.deb13
asl3-asterisk-modules 2:22.7.0+asl3-3.7.1-1.deb13
asl3-menu 1.16-1.deb13
asl3-update-nodelist 2.0.0-1.deb13
asl-apt-repos 2.0-1.deb13
cockpit 337-1
cockpit-bridge 337-1
cockpit-networkmanager 337-1
cockpit-packagekit 337-1
cockpit-sosreport 337-1
cockpit-storaged 337-1
cockpit-system 337-1
cockpit-wifimanager 1.2.0-1.deb13
cockpit-ws 337-1
dahdi 1:3.1.0-2.1
dahdi-dkms 1:3.4.0-10.asl.deb13
dahdi-linux 1:3.4.0-10.asl.deb13
dahdi-source 1:3.4.0-10.asl.deb13
pi@node688580:~ $

I believe it was open, unless I need to do something specific after the wireguard is installed? That was not included as a step in the setup?

Also, I’m getting a message after restart, that the wireguard has failed to start. I don’t have a clue as to what to do about that error?

Output from the service section log:

wg-quick@wg0.service

Failed to start wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0.

CODE_FILE

src/core/job.c

CODE_FUNC

job_emit_done_message

CODE_LINE

818

INVOCATION_ID

2dd0242cd1504fd383a57370c6269233

JOB_ID

9443

JOB_RESULT

failed

JOB_TYPE

start

MESSAGE_ID

be02cf6855d2428ba40df7e9d022f03d

PRIORITY

3

SYSLOG_FACILITY

3

SYSLOG_IDENTIFIER

systemd

TID

1

UNIT

wg-quick@wg0.service

_BOOT_ID

9016bc1f508c41b09cad9010adeafac8

_CAP_EFFECTIVE

1ffffffffff

_CMDLINE

/sbin/init

_COMM

systemd

_EXE

/usr/lib/systemd/systemd

_GID

0

_HOSTNAME

node688580

_MACHINE_ID

f7115a2a786bdeeda5254a07699f8124

_PID

1

_RUNTIME_SCOPE

system

_SOURCE_REALTIME_TIMESTAMP

1773453598636875

_SYSTEMD_CGROUP

/init.scope

_SYSTEMD_SLICE

-.slice

_SYSTEMD_UNIT

init.scope

_TRANSPORT

journal

_UID

0

__CURSOR

s=1bcb2e0e908540c0847bc6a082f22265;i=1070;b=9016bc1f508c41b09cad9010adeafac8;m=20554fa27;t=64cf257c5bb55;x=376ed5ec3c7017ca

__MONOTONIC_TIMESTAMP

8679389735

__REALTIME_TIMESTAMP

1773453598636885

__SEQNUM

4208

__SEQNUM_ID

1bcb2e0e908540c0847bc6a082f22265

Failed to start wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0. Also, all you posted is systemd is complaining about it but nothing in that post of why it’s down.

In experience that’s usually an issue with the file wg0.conf but let’s take a look.

Run this and paste out the problems back here and not the whole output. Red and yellow alerts

sudo systemctl status wg-quick@wg0.service --no-pager -l
sudo journalctl -xeu wg-quick@wg0.service --no-pager
sudo wg-quick up wg0

Please provide the output of asl-node-auth-check.

Here’s the output from asl-node-auth-check

-----===== AllStarLink Node Authentication Check =====-----

Checking configuration:
Info: rpt.conf has configuration for: 688580
Info: /etc/asterisk/iax.conf contains no registration lines.
Info: /etc/asterisk/rpt_http_registrations.conf contains 1 registration line(s)
Info: Registrations present for configured node(s): 688580
Warning: IP test to https://conntest-east1.allstarlink.org/ip failed
Warning: IP test to https://conntest-west1.allstarlink.org/ip failed
Warning: IP test to https://conntest-west2.allstarlink.org/ip failed
Warning: IP test to udp://conntest-east1.allstarlink.org:4570 failed
Info: IP from udp://conntest-west1.allstarlink.org:4569 reports: 44.27.133.126
Info: IP from udp://conntest-west2.allstarlink.org:4569 reports: 44.27.133.126
Error: HTTP IP probes DO NOT have consensus on the same perceived IP! CGNAT?
OK: IAX IP probes have consensus on the same perceived IP

Testing node 688580:
OK: Node registration config is well-formed
OK: Node registration type is HTTP
Error: register.allstarlink.org is unreachable (via HTTP)
Error: HTTP registration state is Not Registered
Info: Stopping node checks due to registration failure
Info: as further information will be unreliable

 Error: Node 688580 has 1 error(s)!


Something with your configuration is incorrect and your Wireguard tunnel isn't passing traffic properly. I'd suggest re-checking every step of your Wireguard setup.

Unfortunately, this is where my skill set starts to show its limits. I could go through the installation steps again, or are there other places to check?

Please paste in the output of the following commands:

ip addr list dev wg0
ip rule show
ip route show table 51820
ip route get `dig +short register.allstarlink.org`

When you paste is in, start with a ```, hit enter, paste it in, hit enter, and then add another ```. That will preserve the formatting.

Thank you for your help, again.

Here we go:

‘4: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1380 qdisc noqueue state UNKNOWN group default qlen 1000
link/none
inet 44.27.133.126/32 scope global wg0
valid_lft forever preferred_lft forever
inet6 fe80::2cde:576a:904f:d72c/128 scope link
valid_lft forever preferred_lft forever’

ip rule show

‘0: from all lookup local
32764: from all lookup main suppress_prefixlength 0
32765: not from all fwmark 0xca6c lookup 51820
32766: from all lookup main
32767: from all lookup default’

ip route show table 51820

‘default dev wg0 scope link’

ip route get `dig +short register.allstarlink.org`

‘52.21.169.197 dev wg0 table 51820 src 44.27.133.126 uid 0
cache’

I’m not sure what that tells us :slight_smile:

It tells you that your configuration network-wise is correct. That leaves either a problem with the keys being mis-entered or your have a network problem reaching the 44Net Connect head end. Look at each keypair and compare it with what was in the 44Net portal.