Windows Machine unable to ping other netbird peers

[nouman1657]

Hi all,

we have installed netbird through docker version 0.27.3. ok now the other agents like centos and other OS are working good but when we install agent on windows. its just able to ping to netbird server IP and no other IP is pingable. any idea about it.

[maxus-git]

Hi,
have you double-checked the Access Control Policies and the Assigned group of that specific client?
My windows client works perfectly fine (server is self-hosted).

[nouman1657]

All my devices are in "all" group AND default access policy is enabled which allow any to any. but still my windows machine is not able to connect to different peers.

[maxus-git]

What does the output of netbird status -d in a Terminal or PowerShell say?
Also show the output of route print.

Also add the label Windows in the Issue.

[dark-vex]

@maxus-git I'm having the same issue reported here, all Linux peers are able to see each others but a PC with netbird on Windows does see only the server:

• Netbird client version

C:\Users\PC>netbird version
0.36.7

• Netbird status

C:\Users\PC>netbird status -d
Peers detail:
 dan.netbird.selfhosted:
  NetBird IP: 100.75.157.8/32
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 1 minute, 32 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 mb.netbird.selfhosted:
  NetBird IP: 100.75.34.229/32
  Public key: 5dN0nQFo6p9wQ9EUqDiPKvwpotpT9Cv6aMaMGPQiBls=
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 1 minute, 32 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 rmon.netbird.selfhosted:
  NetBird IP: 100.75.0.210
  Public key: <redacted>
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/srflx
  ICE candidate endpoints (Local/Remote): xxx.xxx.xxx.xxx:14994/xxx.xxx.xxx.xxx:51820
  Relay server address:
  Last connection update: 1 minute, 31 seconds ago
  Last WireGuard handshake: 1 minute, 31 seconds ago
  Transfer status (received/sent) 124 B/276 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 28.0846ms

 dcknuc.netbird.selfhosted:
  NetBird IP: 100.75.12.125
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 mail2.netbird.selfhosted:
  NetBird IP: 100.75.59.63
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 1 minute, 20 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 ms01-home.netbird.selfhosted:
  NetBird IP: 100.75.93.97
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 1 minute, 19 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 dckbio-1.netbird.selfhosted:
  NetBird IP: 100.75.192.31
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 1 minute, 19 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

 pve.netbird.selfhosted:
  NetBird IP: 100.75.212.186
  Public key: <redacted>
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 0s

OS: windows/amd64
Daemon version: 0.36.7
CLI version: 0.36.7
Management: Connected to https://vpn.domain.tld:443
Signal: Connected to https://vpn.domain.tld:443
Relays:
  [stun:vpn.domain.tld:3478] is Available
  [turn:vpn.domain.tld:3478?transport=udp] is Unavailable, reason: allocate: attribute not found
Nameservers:
FQDN: laptopwin.netbird.selfhosted
NetBird IP: 100.75.168.180/16
Interface type: Userspace
Quantum resistance: false
Routes: -
Networks: -
Peers count: 1/8 Connected

• Route print

C:\Users\PC>route print
===========================================================================
Interface List
 18...f8 75 a4 7e 98 cd ......Intel(R) Ethernet Connection (4) I219-V
 60...........................WireGuard Tunnel
  5...00 ff 0a e0 3c 59 ......TAP-Windows Adapter V9
 12...7c b2 7d aa 4f ac ......Microsoft Wi-Fi Direct Virtual Adapter #3
  8...7e b2 7d aa 4f ab ......Microsoft Wi-Fi Direct Virtual Adapter #4
 10...7c b2 7d aa 4f ab ......Intel(R) Dual Band Wireless-AC 8265
  2...7c b2 7d aa 4f af ......Bluetooth Device (Personal Area Network)
  1...........................Software Loopback Interface 1
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     10.10.50.254     10.10.50.198     35
       10.10.50.0    255.255.255.0         On-link      10.10.50.198    291
     10.10.50.198  255.255.255.255         On-link      10.10.50.198    291
     10.10.50.255  255.255.255.255         On-link      10.10.50.198    291
      xxx.xxx.xxx.xxx  255.255.255.255     10.10.50.254     10.10.50.198     36
       100.75.0.0      255.255.0.0         On-link    100.75.168.180    261
   100.75.168.180  255.255.255.255         On-link    100.75.168.180    261
   100.75.255.255  255.255.255.255         On-link    100.75.168.180    261
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    331
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    331
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    331
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    331
        224.0.0.0        240.0.0.0         On-link      10.10.50.198    291
        224.0.0.0        240.0.0.0         On-link    100.75.168.180    261
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    331
  255.255.255.255  255.255.255.255         On-link      10.10.50.198    291
  255.255.255.255  255.255.255.255         On-link    100.75.168.180    261
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    331 ::1/128                  On-link
 10    291 fe80::/64                On-link
 10    291 fe80::4d90:3471:86ab:59c6/128
                                    On-link
  1    331 ff00::/8                 On-link
 10    291 ff00::/8                 On-link
 60    261 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

C:\Users\PC>

[lixmal]

@dark-vex your turn server is broken:

[turn:vpn.domain.tld:3478?transport=udp] is Unavailable, reason: allocate: attribute not found

Those connections would probably be relayed if a direct connection isn't possible.
I suggest setting up the new relay instead https://github.com/netbirdio/netbird/blob/main/infrastructure_files/docker-compose.yml.tmpl#L52-L69

[dark-vex]

Good point, I missed it🤦 Thank you @lixmal I have enabled the new relay and it's working fine now