all the nodes are like that where the listenport in the config doesnot match what wg is showing

obviously cannot ping

root@winterfell:/etc/netclient# ./netclient --version Netclient CLI version v0.7.1

@User that's the new UDP hole-punching feature. To udp hole punch, the node needs to select it's own port, and then the server will advertise it to the other nodes. This does take a minute to kick in (the node must check into the server, the server must check it's peers list, and the other nodes must get the new address, so will take a maximum of 1.5 minutes to advertise).

This feature can be turned off for a full network (switch) or on an individual node (flag)

if it's turned off, it will use the static port you've assigned

ok, will try that

so I switch off udp-hole punching in the UI... did several checkin and pulls..... no change

you switch it off on the network or the node?

network

ok, that will only set it on node creation, if the nodes are already created you'll need to edit the node details and change "udp hole punch" to "no"

ok, that fixed it.

so why didn't the hole punching work....

what should the peers in wg show have as their endpoint?

it should have the udp hole punch port

do you have any logs?

logs from? netmaker, netclient?

netclient service probably

also, how locked down is your firewall?

if you've got udp traffic pretty heavily locked down that might explain it too

I had been playing with it as two of the nodes were on oracle vps and I still not sure I understand oracle firewalll settings. But other nodes were in locations where the firewall should not be an issue

if the server is unable to forge a connection with the nodes then udp hole punching wont work

once a connection is established between the server and the node, it reads the port of the node and sends it to the other peers

only thing in journals is this

ug 16 11:14:41 winterfell systemd[1]: Created slice system-netclient.slice. Aug 16 11:14:41 winterfell netclient[52553]: 2021/08/16 11:14:41 Local Address has changed from to 192.168.86.69 Aug 16 11:14:41 winterfell netclient[52553]: 2021/08/16 11:14:41 Updating address Aug 16 11:14:42 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:14:43 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:15:07 winterfell systemd[1]: netclient@netmaker.service: Succeeded.

...

Aug 16 15:17:32 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 15:18:01 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 15:18:33 winterfell systemd[1]: netclient@netmaker.service: Succeeded.

correction found more ---

mkasun@winterfell~> journalctl -u netclient@netmaker -- Logs begin at Tue 2021-03-30 06:45:02 EDT, end at Mon 2021-08-16 15:24:09 EDT. -- Aug 16 11:14:41 winterfell systemd[1]: Started Network Check. Aug 16 11:14:41 winterfell netclient[52553]: 2021/08/16 11:14:41 Local Address has changed from to 192.168.86.69 Aug 16 11:14:41 winterfell netclient[52553]: 2021/08/16 11:14:41 Updating address Aug 16 11:14:42 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:14:42 winterfell systemd[1]: Started Network Check. Aug 16 11:14:43 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:15:01 winterfell systemd[1]: Started Network Check. Aug 16 11:15:07 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:15:32 winterfell systemd[1]: Started Network Check. Aug 16 11:15:33 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:16:01 winterfell systemd[1]: Started Network Check. Aug 16 11:16:02 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:16:30 winterfell systemd[1]: Started Network Check. Aug 16 11:16:30 winterfell systemd[1]: netclient@netmaker.service: Succeeded. Aug 16 11:17:00 winterfell systemd[1]: Started Network Check. Aug 16 11:17:00 winterfell systemd[1]: netclient@netmaker.service: Succeeded. ...

Those logs look normal.. not sure what could be happening