Wirguard Bestpractice: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| Zeile 16: | Zeile 16: | ||
=Server= | =Server= | ||
;Es wird an allen Interfaces auf 51821 gelauscht | ;Es wird an allen Interfaces auf 51821 gelauscht | ||
*cat /etc/wireguard/wg0.conf | *cat > /etc/wireguard/wg0.conf | ||
<pre> | <pre> | ||
[Interface] | [Interface] | ||
| Zeile 23: | Zeile 23: | ||
ListenPort = 51821 | ListenPort = 51821 | ||
#Privater Schlüssel des Servers | #Privater Schlüssel des Servers | ||
PrivateKey = | PrivateKey = $S_PRIVKEY | ||
MTU = 1400 | MTU = 1400 | ||
PostUp = | PostUp = | ||
| Zeile 34: | Zeile 34: | ||
PresharedKey = ZZZZZ | PresharedKey = ZZZZZ | ||
AllowedIPs = 10.255.44.61/32 | AllowedIPs = 10.255.44.61/32 | ||
HERE | |||
</pre> | </pre> | ||
*systemctl status wg-quick@wg0.service --enable | *systemctl status wg-quick@wg0.service --enable | ||
Version vom 29. Oktober 2026, 15:12 Uhr
Schlüsselgenerierung
Privater Schlüssel
- S_PRIVKEY=$(wg genkey)
- echo $S_PRIVKEY
8GW6pdwT+mZaUA2EZYGHJdbK7QuWmHhig/zPptIMmHw=
Öffentlicher Schlüssel
- S_PUBKEY=$(echo $PRIVKEY | wg pubkey)
- echo $S_PUBKEY
vDr02dlHQ/yqL1YQkzS8hLz3GBLi/DO+H3PLIafRSUs=
Gemeinsamer Schlüssel
- PSK=$(wg genpsk)
- echo $PSK
SpjieF6COy8xh2SdmTodRutgtRxAo3UPBRM0j9sM8AY=
Server
- Es wird an allen Interfaces auf 51821 gelauscht
- cat > /etc/wireguard/wg0.conf
[Interface] #Virtuelle Adresse Address = 10.255.44.254/24 ListenPort = 51821 #Privater Schlüssel des Servers PrivateKey = $S_PRIVKEY MTU = 1400 PostUp = PostDown = [Peer] #Öffentlicher Schlüssel des Clients PublicKey = YYYYY #Gemeinsamer Schlüssel PresharedKey = ZZZZZ AllowedIPs = 10.255.44.61/32 HERE
- systemctl status wg-quick@wg0.service --enable
Client
- cat /etc/wireguard/wg0.conf
[Interface] Address = 10.255.44.3/24 #Privater Schlüssel des Clients PrivateKey = WWWWW [Peer] #Öffentlicher Schlüssel des Servers PublicKey = VVVVV #Gemeinsamer Schlüssel PresharedKey = ZZZZZ Endpoint = x.y.s.d:51821 PersistentKeepalive = 15 AllowedIPs = 10.255.44.0/23
Manuelles starten und stoppen
- sudo wg-quick up wg0
- sudo wg-quick down wg0