Changes for page Use Wireguard VPN in Dragino Gateways
Last modified by Xiaoye on 2024/04/19 19:52
From version 12.1
edited by Edwin Chen
on 2023/11/21 16:06
on 2023/11/21 16:06
Change comment:
Uploaded new attachment "image-20231121160528-1.png", version {1}
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Attachments (0 modified, 20 added, 0 removed)
- image-20240102190036-1.png
- image-20240103093849-1.png
- image-20240103094049-2.png
- image-20240103094832-3.png
- image-20240103095200-4.png
- image-20240103095549-5.png
- image-20240103095756-6.png
- image-20240419191339-1.png
- image-20240419191407-2.png
- image-20240419191607-3.png
- image-20240419191626-4.png
- image-20240419191838-5.png
- image-20240419192359-6.png
- image-20240419193647-7.png
- image-20240419194325-8.png
- image-20240419194504-9.png
- image-20240419194722-10.png
- image-20240419194912-11.png
- image-20240419194946-12.png
- image-20240419195010-13.png
Details
- Page properties
-
- Author
-
... ... @@ -1,1 +1,1 @@ 1 -XWiki. Edwin1 +XWiki.Xiaoye - Content
-
... ... @@ -6,123 +6,118 @@ 6 6 7 7 8 8 9 -= 1. What is Wire guard VPN? =9 += 1. What is WireGuard VPN? = 10 10 11 11 12 12 [[WireGuard>>https://www.wireguard.com/]]^^®^^ is an extremely simple yet fast and modern VPN that utilizes **state-of-the-art [[cryptography>>url:https://www.wireguard.com/protocol/]]**. It aims to be [[faster>>url:https://www.wireguard.com/performance/]], [[simpler>>url:https://www.wireguard.com/quickstart/]], leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry. 13 13 14 14 15 +Network Structure for WireGuard VPN: 16 + 17 +[[image:image-20231121160528-1.png]] 18 + 19 + 15 15 = 2. Run WireGuard VPN in PC = 16 16 22 +There are many methods to install and set WireGuard server. Below is an example for reference to set up WireGuard Server in Windows. 17 17 24 +**Video Instruction**: [[Install WireGuard Server in Windows>>https://www.youtube.com/watch?v=1AWVvW5oJtU]]. 25 + 26 +For other OS and methods, please search Google for more. 27 + 28 + 18 18 = 3. Configure Wireguard VPN on Gatewaythe LPS8N/DLOS8N/LG308N = 19 19 20 20 == 3.1 For LPS8N/DLOS8N/LG308N == 21 21 22 22 23 - Dueto thesize of Wireguard packages.We didn't add it as a default feature ofgateways.If theuser wants to use WireguardPlease upgradeyourgatewayfirmware withthe special[[firmware>>https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/DLOS8/Firmware/Wireguard-firmware/]].34 +After Firmware lgw-5.4.1704197758, we added Wireguard. Users can upgrade the gateways to [[firmware>>https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/DLOS8/Firmware/Release/]]. after 169 to get WireGuard support. 24 24 36 +=== 1.) Preparation === 25 25 26 - ===3.1.1Configurationviacommandline===38 +* **Prepare WireGuard server public key, IP address, port, and peer address.** 27 27 28 -=== =3.1.1.1KeyManagement====40 +=== 2.) Steup WireGuard === 29 29 30 30 31 -** #Generatekeys**43 +* **Accessing the gateway's WireGuard page ~-~-> System/WireGuard** 32 32 33 -(% class="box infomessage" %) 34 -((( 35 -umask go= 45 +[[image:image-20240103094049-2.png||height="437" width="915"]] 36 36 37 -wg genkey | tee wgserver.key | wg pubkey > wgserver.pub 38 38 39 - wggenkey|teewgclient.key| wgpubkey>wgclient.pub48 +* **Add the gateway's public key to the server and assign the peer address.** 40 40 41 -wg genpsk > wgclient.psk 42 -))) 50 +[[image:image-20240103094832-3.png||height="545" width="912"]] 43 43 44 -[[image:image-20231110150147-1.png||height="82" width="566"]] 45 45 53 +* **Fill in the parameters of the WireGuard server** 46 46 47 - ==== 3.1.1.2 Firewall configuration====55 +[[image:image-20240103095200-4.png||height="642" width="929"]] 48 48 49 49 50 -((( 51 -**#Configure firewall** 52 -))) 53 53 54 -(% class="box infomessage" %) 55 -((( 56 -uci del_list firewall.wan.network="vpn" 59 +== 3.2 For LPS8v2 == 57 57 58 - uciadd_listfirewall.wan.network="vpn"61 +=== **1) Access the WireGuard configure page** === 59 59 60 -uci commit firewall 61 -))) 63 +[[image:image-20240419191607-3.png||height="334" width="1002"]] 62 62 63 -[[image:image-20231110151524-2.png]] 64 64 66 +=== **2.) Select Configuration Type** === 65 65 66 -((( 67 -**#Reload firewall** 68 -))) 68 +[[image:image-20240419191838-5.png||height="244" width="1005"]] 69 69 70 -(% class="box infomessage" %) 71 -((( 72 -/etc/init.d/firewall 73 -))) 74 74 71 +=== **3.) Default Key** === 75 75 76 - ==== 3.1.1.3Network configuration====73 +[[image:image-20240419193647-7.png||height="557" width="997"]] 77 77 78 78 79 -((( 80 -**#Configure network** 81 -))) 76 +**Enter the configured information and Save&Apply configuration** 82 82 83 -(% class="box infomessage" %) 84 -((( 85 - uci -q delete network.vpn 86 - uci set network.vpn="interface" 87 - uci set network.vpn.proto="wireguard" 88 - uci set network.vpn.private_key="{VPN_KEY}" 89 - uci add_list network.vpn.addresses="{VPN_ADDRESS}" 90 -))) 78 +[[image:image-20240419192359-6.png]] 91 91 92 -[[image:image-20231110152122-4.png]] 93 93 81 +**Check WireGuard Status** 94 94 95 -((( 96 -**#Add VPN peers** 97 -))) 83 +[[image:image-20240419194722-10.png||height="929" width="998"]] 98 98 99 -(% class="box infomessage" %) 100 -((( 101 - uci -q delete network.wgserver 102 - uci set network.wgserver="wireguard_vpn" 103 - uci set network.wgserver.public_key="{VPN_PUB}" 104 - uci set network.wgserver.endpoint_host="{VPN_SERVER}" 105 - uci set network.wgserver.preshared_key="{VPN_PSK}" 106 - uci set network.wgserver.endpoint_port="{VPN_PORT}" 107 - uci set network.wgserver.persistent_keepalive="25" 108 - uci set network.wgserver.route_allowed_ips="1" 109 - uci add_list network.wgserver.allowed_ips="0.0.0.0/0" 110 - uci add_list network.wgserver.allowed_ips="::/0" 111 - uci commit network 112 -))) 113 113 114 - [[image:image-20231110152109-3.png]]86 +=== **4.) Import Key** === 115 115 88 +(% class="wikigeneratedid" id="H" %) 89 +[[image:image-20240419194325-8.png||height="938" width="998"]] 116 116 117 -((( 118 -**#reload network service** 119 -))) 120 120 121 -(% class="box infomessage" %) 122 -((( 123 -/etc/init.d/network reload 124 -))) 92 +**Enter WireGuard configuration information** 93 +[[image:image-20240419194504-9.png||height="604" width="998"]] 125 125 126 126 127 127 128 - 97 +**Save&Apply WireGuard configuration** 98 + 99 +[[image:image-20240419195010-13.png||height="1012" width="992"]] 100 + 101 + 102 += 4. Testing = 103 + 104 + 105 +* **Ping Client Peer Address** 106 + 107 +[[image:image-20240103095549-5.png||height="405" width="928"]] 108 + 109 + 110 +* **Access Gateway WebUI via Client Peer Address** 111 + 112 +[[image:image-20240103095756-6.png||height="488" width="933"]] 113 + 114 + 115 += 5. Troubleshooting = 116 + 117 +* **Unable to ping client** 118 + 119 + Please check if the client and server are on the same Network 120 + 121 + 122 + 123 +=== ===
- image-20240102190036-1.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +80.1 KB - Content
- image-20240103093849-1.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +62.7 KB - Content
- image-20240103094049-2.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +62.9 KB - Content
- image-20240103094832-3.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +100.1 KB - Content
- image-20240103095200-4.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +82.2 KB - Content
- image-20240103095549-5.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +31.5 KB - Content
- image-20240103095756-6.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +562.0 KB - Content
- image-20240419191339-1.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +52.8 KB - Content
- image-20240419191407-2.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +44.4 KB - Content
- image-20240419191607-3.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +45.1 KB - Content
- image-20240419191626-4.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +53.5 KB - Content
- image-20240419191838-5.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +31.9 KB - Content
- image-20240419192359-6.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +62.9 KB - Content
- image-20240419193647-7.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +40.0 KB - Content
- image-20240419194325-8.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +59.7 KB - Content
- image-20240419194504-9.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +43.1 KB - Content
- image-20240419194722-10.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +65.7 KB - Content
- image-20240419194912-11.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +31.1 KB - Content
- image-20240419194946-12.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +55.0 KB - Content
- image-20240419195010-13.png
-
- Author
-
... ... @@ -1,0 +1,1 @@ 1 +XWiki.Xiaoye - Size
-
... ... @@ -1,0 +1,1 @@ 1 +50.3 KB - Content