Wiki source code of Use Wireguard VPN in Dragino Gateways

Version 11.2 by Xiaoling on 2023/11/11 09:55

version	line-number	content
8.2	1	(% class="wikigeneratedid" %)
	2	Table of Contents:
	3
	4	{{toc/}}
	5
	6
	7
	8
9.1	9	= 1. What is Wireguard VPN? =
8.2	10
11.2	11
11.1	12	[[WireGuard>>https://www.wireguard.com/]]^^®^^ is an extremely simple yet fast and modern VPN that utilizes state-of-the-art [[cryptography>>url:https://www.wireguard.com/protocol/]]. It aims to be [[faster>>url:https://www.wireguard.com/performance/]], [[simpler>>url:https://www.wireguard.com/quickstart/]], leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry.
6.1	13
11.1	14
10.1	15	= 2. Run WireGuard VPN in PC =
7.1	16
9.1	17
10.1	18	= 3. Configure Wireguard VPN on Gatewaythe LPS8N/DLOS8N/LG308N =
9.1	19
	20
10.1	21	== 3.1 For LPS8N/DLOS8N/LG308N ==
	22
11.2	23
8.1	24	Due to the size of Wireguard packages. We didn't add it as a default feature of gateways. If the user wants to use Wireguard Please upgrade your gateway firmware with the special [[firmware>>https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/DLOS8/Firmware/Wireguard-firmware/]].
7.1	25
6.1	26
10.1	27	=== 3.1.1 Configuration via command line ===
8.2	28
10.1	29	==== 3.1.1.1 Key Management ====
6.1	30
	31
8.2	32	#Generate keys
	33
6.1	34	(% class="box infomessage" %)
	35	(((
	36	umask go=
	37
	38	wg genkey \| tee wgserver.key \| wg pubkey > wgserver.pub
	39
	40	wg genkey \| tee wgclient.key \| wg pubkey > wgclient.pub
	41
	42	wg genpsk > wgclient.psk
	43	)))
	44
	45	[[image:image-20231110150147-1.png\|\|height="82" width="566"]]
	46
	47
10.1	48	==== 3.1.1.2 Firewall configuration ====
6.1	49
	50
	51	(((
8.2	52	#Configure firewall
6.1	53	)))
	54
	55	(% class="box infomessage" %)
	56	(((
	57	uci del_list firewall.wan.network="vpn"
	58
	59	uci add_list firewall.wan.network="vpn"
	60
	61	uci commit firewall
	62	)))
	63
	64	[[image:image-20231110151524-2.png]]
	65
	66
	67	(((
8.2	68	#Reload firewall
6.1	69	)))
	70
	71	(% class="box infomessage" %)
	72	(((
	73	/etc/init.d/firewall
	74	)))
	75
	76
10.1	77	==== 3.1.1.3 Network configuration ====
6.1	78
8.2	79
6.1	80	(((
8.2	81	#Configure network
6.1	82	)))
	83
	84	(% class="box infomessage" %)
	85	(((
	86	uci -q delete network.vpn
	87	uci set network.vpn="interface"
	88	uci set network.vpn.proto="wireguard"
	89	uci set network.vpn.private_key="{VPN_KEY}"
	90	uci add_list network.vpn.addresses="{VPN_ADDRESS}"
	91	)))
	92
	93	[[image:image-20231110152122-4.png]]
	94
	95
	96	(((
8.3	97	#Add VPN peers
6.1	98	)))
	99
	100	(% class="box infomessage" %)
	101	(((
	102	uci -q delete network.wgserver
	103	uci set network.wgserver="wireguard_vpn"
	104	uci set network.wgserver.public_key="{VPN_PUB}"
	105	uci set network.wgserver.endpoint_host="{VPN_SERVER}"
	106	uci set network.wgserver.preshared_key="{VPN_PSK}"
	107	uci set network.wgserver.endpoint_port="{VPN_PORT}"
	108	uci set network.wgserver.persistent_keepalive="25"
	109	uci set network.wgserver.route_allowed_ips="1"
	110	uci add_list network.wgserver.allowed_ips="0.0.0.0/0"
	111	uci add_list network.wgserver.allowed_ips="::/0"
	112	uci commit network
	113	)))
	114
	115	[[image:image-20231110152109-3.png]]
	116
	117
	118	(((
8.3	119	#reload network service
6.1	120	)))
	121
	122	(% class="box infomessage" %)
	123	(((
	124	/etc/init.d/network reload
	125	)))
	126
	127
	128
	129

Wiki source code of Use Wireguard VPN in Dragino Gateways

Applications

Navigation