Weird Wireguard issue w/ allowed_ips

Running into a very weird Wireguard issue. I have had a site-to-site configured for years that worked perfectly. After some recent updates, that is no longer the case. The web UI and UCI config show the right allowed_ips but wireguard’s wg show and wg showconf commands do not have all of the allowed IPs, only the SiteA peer.

Site A:, network
Site B:, network

UCI Config

network.@wireguard_wg0[0].allowed_ips='' ''


However, when I look at wg show output, the endpoint is not configured with the 192 network.

wg show output

peer: [redacted]
  preshared key: (hidden)
  endpoint: [redacted]:[redacted]
  allowed ips:
  latest handshake: 1 minute, 12 seconds ago
  transfer: 4.26 MiB received, 323.04 KiB sent
  persistent keepalive: every 25 seconds

wg showconf output

PublicKey = [redacted]
PresharedKey = [redacted]
AllowedIPs =
Endpoint = [redacted]:[redacted]
PersistentKeepalive = 25

As you can see, the connection is on. I can access SiteB at but I cannot access anything on the network.

I have reset the interface, the entire network, and I have rebooted the router. The 192 network is just not showing up anywhere.

Any troubleshooting tips?

Going to resolve this myself. Suspected it may be a config issue and confirmed: you can’t have multiple peers on the same wireguard interface (w.g. wg0) that have the same allowed_ips.

See: Multiple Peers with Wireguard? - Installing and Using OpenWrt - OpenWrt Forum

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.