Skip to content

Commit 94d83e3

Browse files
updates
1 parent e5145ac commit 94d83e3

File tree

1 file changed

+20
-33
lines changed

1 file changed

+20
-33
lines changed

src/content/docs/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide.mdx

Lines changed: 20 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ This guide helps you diagnose and resolve common issues with the Cloudflare WARP
1111

1212
## Prerequisites
1313

14-
To use this guide, you must have completed the [Zero Trust onboarding flow](/cloudflare-one/setup/) with a Zero Trust organizaton created and the WARP client installed on your device.
14+
To use this guide, you must have completed the [Zero Trust onboarding flow](/cloudflare-one/setup/) with a Zero Trust organizaton created and the WARP client installed on an end user device.
1515

1616
## Troubleshooting steps
1717

@@ -102,51 +102,31 @@ After you have your diagnostic files, go to [Review diagnostic logs](/cloudflare
102102

103103
## 2. Review diagnostics logs
104104

105-
WARP diagnostic logs display WARP information relevant to the target device after all MDM and other software operations have been applied, allowing you to determine whether WARP is misconfigured or affected by conflicting software. After downloading the WARP diagnostic logs and/or PCAPs, you will review key files to troubleshoot your issue by checking for potential misconfigurations.
105+
WARP diagnostic logs display WARP information relevant to the target device after all MDM and other software operations have been applied, allowing you to determine whether WARP is misconfigured or behaving in an unexpected way. After downloading the WARP diagnostic logs, you will review key files to check that WARP is operating as intended. You will check the device's WARP status, its applied profile ID, and its split tunnel configuration.
106106

107-
### 2a. Check WARP status
107+
### Check WARP status
108108

109109
Open the `warp-status.txt` file to review the status of the WARP connection when the `warp-diag` was collected. A connected WARP client will appear as:
110110

111111
```
112112
Ok(Connected)
113113
```
114114

115-
### Common connectivity issues
115+
If the WARP client is experiencing issues, the error will display in the WARP GUI on the device. Use the [Client errors](/cloudflare-one/connections/connect-devices/warp/troubleshooting/client-errors/) documentation to identify your error, its cause, and the solution.
116116

117-
#### WARP client failing to connect
117+
### Check WARP settings
118118

119-
If connectivity fails, reset the encryption keys to force re-establishement of the WARP tunnel without deleting registration.
120-
121-
###### Windows, Mac, Linux
122-
123-
To reset the encryption keys on a Windows, Mac, or Linux device:
124-
125-
1. Open the WARP GUI > select the gear icon > **Preferences**.
126-
2. Select **Connection**.
127-
3. Select **Reset encryption keys**.
128-
129-
##### iOS, Android
130-
131-
To reset the encryption keys on an iOS or Android device:
132-
133-
1. Open the Cloudflare One Agent.
134-
2. Select **Settings** > **Advanced** > **Connection options**.
135-
3. Select **Reset security keys**.
136-
137-
### 2b. Check WARP settings
138-
139-
Open the `warp-status.txt` file to review the WARP client settings, split tunnel configuration, and the applied device profile. Use this information to identify any discrepancies from the expected behavior you configure pre-deployment.
119+
After you have checked WARP status, you will review WARP's settings on the device to check if the expected configuration has been applied. Open the `warp-settings.txt` file to review the WARP client settings. You will check the device's applied device profile and split tunnel configuration.
140120

141121
#### Example `warp-settings.txt` file
142122

143-
Review the following `warp-settings.txt` file and the descriptions of its content below.
123+
After you have downloaded the WARP diagnostic logs, open the `warp-settings.txt` file. Review the following example `warp-settings.txt` file and the descriptions of its content below.
144124

145125
```txt
146126
Merged configuration:
147127
(derived) Always On: true
148-
(network policy) Switch Locked: false # If false, does not allows the user to [turn off the WARP switch](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#lock-warp-switch) and disconnect the client.
149-
(network policy) Mode: WarpWithDnsOverHttps <-- This is WARP with Gateway mode
128+
(network policy) Switch Locked: false # If false, does not allows the user to turn off the WARP toggle and disconnect the WARP client
129+
(network policy) Mode: WarpWithDnsOverHttps # The device's WARP mode, this is WARP with Gateway mode
150130
(network policy) WARP tunnel protocol: WireGuard
151131
(default) Disabled for Wifi: false
152132
(default) Disabled for Ethernet: false
@@ -171,13 +151,13 @@ Merged configuration:
171151
(network policy) Allow Updates: false <------- Will the client perform the update checks, doesn't necessarily mean they'll be able to install them (depends on user permissions)
172152
(network policy) Allowed to Leave Org: true <-- Is the button in the GUI grayed out or not. Note, it'll always be grayed out if they have an MDM file
173153
(api defaults) Known apple connectivity check IPs: xx.xxx.0.0/16;
174-
(network policy) LAN Access Settings: Allowed until reconnect on a /24 subnet <-- The maximum size of network that'll be allowed when Access Lan is clicked.
154+
(network policy) LAN Access Settings: Allowed until reconnect on a /24 subnet <-- The maximum size of network that will be allowed when Access Lan is clicked.
175155
(network policy) Profile ID: 000000x1-00x1-1xx0-1xx1-11101x1axx11
176156
```
177157

178158
:::tip[Quick debugging]
179159

180-
The command `warp-cli settings` will generate the same information in your device's terminal that is present in the `warp-settings.txt` file.
160+
The command `warp-cli settings` in a terminal will generate the same information that is present in the `warp-settings.txt` file.
181161

182162
:::
183163

@@ -266,7 +246,7 @@ LAN Access Settings: Allowed until reconnect on a /24 subnet
266246

267247
##### Profile ID
268248

269-
Refers to the [Device profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/) a device is using. In this example, the ID is `000000x1-00x1-1xx0-1xx1-11101x1axx11` which can be cross-referenced in the dashboard by going to **Zero Trust** > **My team** > **Devices** > selecting a device name and reviewing the **Device ID** under **Basic Information**.
249+
Refers to the [Device profile](/cloudflare-one/connections/connect-devices/warp/configure-warp/device-profiles/) a device is using. In this example, the ID is `000000x1-00x1-1xx0-1xx1-11101x1axx11`. To verify if the applied ID is in the dashboard by going to **Zero Trust** > **My team** > **Devices** > selecting a device name and reviewing the **Device ID** under **Basic Information**.
270250

271251
```txt
272252
Profile ID: 000000x1-00x1-1xx0-1xx1-11101x1axx11
@@ -276,12 +256,19 @@ Profile ID: 000000x1-00x1-1xx0-1xx1-11101x1axx11
276256

277257
Use the following list to help identify and troubleshoot common WARP configuration problems.
278258

259+
- [WARP connection error]()
279260
- [Wrong profile ID](/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide/#edit-your-device-profile-match-rules)
280261
- [Wrong split tunnel configuration](/cloudflare-one/connections/connect-devices/warp/troubleshooting/troubleshooting-guide/#wrong-split-tunnel-configuration)
281262

282263
### Wrong profile ID
283264

284-
If your organization has multiple device profiles defined in the Zero Trust dashboard, a device may be matched to an unexpected profile due to lack of precide matcing rules or how profile precedence is configured. Device profiles are evaluated top to bottom based on their order in the UI, and the first matching profile is applied.
265+
If your organization has multiple device profiles defined in the Zero Trust dashboard, a device may be matched to an unexpected profile due to lack of precise matcing rules or how profile precedence is configured.
266+
267+
:::tip[Consider]
268+
269+
270+
271+
:::
285272

286273
To debug a possibly misconfigured device profile, you must:
287274

0 commit comments

Comments
 (0)