Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -1,107 +1,0 @@
1		-= How to configure Wireguard on the LPS8N/DLOS8N/LG308N =
2		-
3		-== **1. Configuration via command line** ==
4		-
5		-=== 1.1 Key Management ===
6		-
7		-#Generate keys
8		-
9		-(% class="box infomessage" %)
10		-(((
11		-umask go=
12		-
13		-wg genkey | tee wgserver.key | wg pubkey > wgserver.pub
14		-
15		-wg genkey | tee wgclient.key | wg pubkey > wgclient.pub
16		-
17		-wg genpsk > wgclient.psk
18		-)))
19		-
20		-[[image:image-20231110150147-1.png||height="82" width="566"]]
21		-
22		-
23		-=== 1.2 Firewall configuration ===
24		-
25		-(((
26		-#Configure firewall
27		-)))
28		-
29		-(((
30		-
31		-)))
32		-
33		-(% class="box infomessage" %)
34		-(((
35		-uci del_list firewall.wan.network="vpn"
36		-
37		-uci add_list firewall.wan.network="vpn"
38		-
39		-uci commit firewall
40		-)))
41		-
42		-[[image:image-20231110151524-2.png]]
43		-
44		-
45		-(((
46		-#Reload firewall
47		-)))
48		-
49		-(% class="box infomessage" %)
50		-(((
51		-/etc/init.d/firewall
52		-)))
53		-
54		-
55		-=== 1.3. Network configuration ===
56		-
57		-(((
58		-#Configure network
59		-)))
60		-
61		-
62		-(% class="box infomessage" %)
63		-(((
64		- uci -q delete network.vpn
65		- uci set network.vpn="interface"
66		- uci set network.vpn.proto="wireguard"
67		- uci set network.vpn.private_key="{VPN_KEY}"
68		- uci add_list network.vpn.addresses="{VPN_ADDRESS}"
69		-)))
70		-
71		-[[image:image-20231110152122-4.png]]
72		-
73		-
74		-(((
75		-#Add VPN peers
76		-)))
77		-
78		-(% class="box infomessage" %)
79		-(((
80		- uci -q delete network.wgserver
81		- uci set network.wgserver="wireguard_vpn"
82		- uci set network.wgserver.public_key="{VPN_PUB}"
83		- uci set network.wgserver.endpoint_host="{VPN_SERVER}"
84		- uci set network.wgserver.preshared_key="{VPN_PSK}"
85		- uci set network.wgserver.endpoint_port="{VPN_PORT}"
86		- uci set network.wgserver.persistent_keepalive="25"
87		- uci set network.wgserver.route_allowed_ips="1"
88		- uci add_list network.wgserver.allowed_ips="0.0.0.0/0"
89		- uci add_list network.wgserver.allowed_ips="::/0"
90		- uci commit network
91		-)))
92		-
93		-[[image:image-20231110152109-3.png]]
94		-
95		-
96		-(((
97		-#reload network service
98		-)))
99		-
100		-(% class="box infomessage" %)
101		-(((
102		-/etc/init.d/network reload
103		-)))
104		-
105		-
106		-
107		-