Use Wireguard VPN in Dragino Gateways

Version 9.1 by Edwin Chen on 2023/11/10 20:31

Table of Contents:

1. What is Wireguard VPN?
2. Configure Wireguard VPN on Gatewaythe LPS8N/DLOS8N/LG308N
- 2.1 For LPS8N/DLOS8N/LG308N
  - 2.1.1 Configuration via command line

1. What is Wireguard VPN?

2. Configure Wireguard VPN on Gatewaythe LPS8N/DLOS8N/LG308N

2.1 For LPS8N/DLOS8N/LG308N

Due to the size of Wireguard packages. We didn't add it as a default feature of gateways. If the user wants to use Wireguard Please upgrade your gateway firmware with the special firmware.

2.1.1 Configuration via command line

2.1.1.1 Key Management

#Generate keys

umask go=

wg genkey | tee wgserver.key | wg pubkey > wgserver.pub

wg genkey | tee wgclient.key | wg pubkey > wgclient.pub

wg genpsk > wgclient.psk

2.1.1.2 Firewall configuration

#Configure firewall

uci del_list firewall.wan.network="vpn"

uci add_list firewall.wan.network="vpn"

uci commit firewall

#Reload firewall

/etc/init.d/firewall

2.1.1.3 Network configuration

#Configure network

uci -q delete network.vpn
uci set network.vpn="interface"
uci set network.vpn.proto="wireguard"
uci set network.vpn.private_key="{VPN_KEY}"
uci add_list network.vpn.addresses="{VPN_ADDRESS}"

#Add VPN peers

uci -q delete network.wgserver
uci set network.wgserver="wireguard_vpn"
uci set network.wgserver.public_key="{VPN_PUB}"
uci set network.wgserver.endpoint_host="{VPN_SERVER}"
uci set network.wgserver.preshared_key="{VPN_PSK}"
uci set network.wgserver.endpoint_port="{VPN_PORT}"
uci set network.wgserver.persistent_keepalive="25"
uci set network.wgserver.route_allowed_ips="1"
uci add_list network.wgserver.allowed_ips="0.0.0.0/0"
uci add_list network.wgserver.allowed_ips="::/0"
uci commit network

#reload network service

/etc/init.d/network reload

Tags: