Wiki source code of LoRaWAN Gateway version with Wireguard Support
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
 |
8.2 | 1 | (% class="wikigeneratedid" %) |
| 2 | **Table of Contents:** | ||
| 3 | |||
| 4 | {{toc/}} | ||
| 5 | |||
| 6 | |||
| 7 | |||
| 8 | |||
| 9 | |||
| |
6.1 | 10 | = How to configure Wireguard on the LPS8N/DLOS8N/LG308N = |
| 11 | |||
| |
7.1 | 12 | |
| |
8.1 | 13 | Due to the size of Wireguard packages. We didn't add it as a default feature of gateways. If the user wants to use Wireguard Please upgrade your gateway firmware with the special [[firmware>>https://www.dragino.com/downloads/index.php?dir=LoRa_Gateway/DLOS8/Firmware/Wireguard-firmware/]]. |
| |
7.1 | 14 | |
| |
6.1 | 15 | |
| |
8.2 | 16 | == 1. Configuration via command line == |
| 17 | |||
| |
6.1 | 18 | === 1.1 Key Management === |
| 19 | |||
| 20 | |||
| |
8.2 | 21 | **#Generate keys** |
| 22 | |||
| |
6.1 | 23 | (% class="box infomessage" %) |
| 24 | ((( | ||
| 25 | umask go= | ||
| 26 | |||
| 27 | wg genkey | tee wgserver.key | wg pubkey > wgserver.pub | ||
| 28 | |||
| 29 | wg genkey | tee wgclient.key | wg pubkey > wgclient.pub | ||
| 30 | |||
| 31 | wg genpsk > wgclient.psk | ||
| 32 | ))) | ||
| 33 | |||
| 34 | [[image:image-20231110150147-1.png||height="82" width="566"]] | ||
| 35 | |||
| 36 | |||
| 37 | === 1.2 Firewall configuration === | ||
| 38 | |||
| 39 | |||
| 40 | ((( | ||
| |
8.2 | 41 | **#Configure firewall** |
| |
6.1 | 42 | ))) |
| 43 | |||
| 44 | (% class="box infomessage" %) | ||
| 45 | ((( | ||
| 46 | uci del_list firewall.wan.network="vpn" | ||
| 47 | |||
| 48 | uci add_list firewall.wan.network="vpn" | ||
| 49 | |||
| 50 | uci commit firewall | ||
| 51 | ))) | ||
| 52 | |||
| 53 | [[image:image-20231110151524-2.png]] | ||
| 54 | |||
| 55 | |||
| 56 | ((( | ||
| |
8.2 | 57 | **#Reload firewall** |
| |
6.1 | 58 | ))) |
| 59 | |||
| 60 | (% class="box infomessage" %) | ||
| 61 | ((( | ||
| 62 | /etc/init.d/firewall | ||
| 63 | ))) | ||
| 64 | |||
| 65 | |||
| |
8.2 | 66 | === 1.3 Network configuration === |
| |
6.1 | 67 | |
| |
8.2 | 68 | |
| |
6.1 | 69 | ((( |
| |
8.2 | 70 | **#Configure network** |
| |
6.1 | 71 | ))) |
| 72 | |||
| 73 | (% class="box infomessage" %) | ||
| 74 | ((( | ||
| 75 | uci -q delete network.vpn | ||
| 76 | uci set network.vpn="interface" | ||
| 77 | uci set network.vpn.proto="wireguard" | ||
| 78 | uci set network.vpn.private_key="{VPN_KEY}" | ||
| 79 | uci add_list network.vpn.addresses="{VPN_ADDRESS}" | ||
| 80 | ))) | ||
| 81 | |||
| 82 | [[image:image-20231110152122-4.png]] | ||
| 83 | |||
| 84 | |||
| 85 | ((( | ||
| |
8.3 | 86 | **#Add VPN peers** |
| |
6.1 | 87 | ))) |
| 88 | |||
| 89 | (% class="box infomessage" %) | ||
| 90 | ((( | ||
| 91 | uci -q delete network.wgserver | ||
| 92 | uci set network.wgserver="wireguard_vpn" | ||
| 93 | uci set network.wgserver.public_key="{VPN_PUB}" | ||
| 94 | uci set network.wgserver.endpoint_host="{VPN_SERVER}" | ||
| 95 | uci set network.wgserver.preshared_key="{VPN_PSK}" | ||
| 96 | uci set network.wgserver.endpoint_port="{VPN_PORT}" | ||
| 97 | uci set network.wgserver.persistent_keepalive="25" | ||
| 98 | uci set network.wgserver.route_allowed_ips="1" | ||
| 99 | uci add_list network.wgserver.allowed_ips="0.0.0.0/0" | ||
| 100 | uci add_list network.wgserver.allowed_ips="::/0" | ||
| 101 | uci commit network | ||
| 102 | ))) | ||
| 103 | |||
| 104 | [[image:image-20231110152109-3.png]] | ||
| 105 | |||
| 106 | |||
| 107 | ((( | ||
| |
8.3 | 108 | **#reload network service** |
| |
6.1 | 109 | ))) |
| 110 | |||
| 111 | (% class="box infomessage" %) | ||
| 112 | ((( | ||
| 113 | /etc/init.d/network reload | ||
| 114 | ))) | ||
| 115 | |||
| 116 | |||
| 117 | |||
| 118 |