Wirguard Bestpractice

Schlüsselgenerierung

#Server Privater Schlüssel

• S_PRIVKEY=$(wg genkey)

#Server Öffentlicher Schlüssel

• S_PUBKEY=$(echo $S_PRIVKEY | wg pubkey)

#Client Privater Schlüssel

• C_PRIVKEY=$(wg genkey)

#ClientÖffentlicher Schlüssel

• C_PUBKEY=$(echo $C_PRIVKEY | wg pubkey)

#Pre Shared Key

• PSK=$(wg genpsk)

Server

Es wird an allen Interfaces auf 51821 gelauscht

• cat<<HERE

[Interface]
#Virtuelle Adresse
Address = 10.255.44.254/24
ListenPort = 51821
#Privater Schlüssel des Servers
PrivateKey = $S_PRIVKEY
MTU = 1400
PostUp =
PostDown =

[Peer]
#Öffentlicher Schlüssel des Clients
PublicKey = $C_PUBKEY
#Gemeinsamer Schlüssel
PresharedKey = ZZZZZ
AllowedIPs = 10.255.44.61/32
HERE

• systemctl status wg-quick@wg0.service --enable

Client

• cat /etc/wireguard/wg0.conf

[Interface]
Address = 10.255.44.3/24
#Privater Schlüssel des Clients
PrivateKey = WWWWW
[Peer]
#Öffentlicher Schlüssel des Servers
PublicKey = VVVVV
#Gemeinsamer Schlüssel
PresharedKey = ZZZZZ
Endpoint = x.y.s.d:51821
PersistentKeepalive = 15
AllowedIPs = 10.255.44.0/23

Manuelles starten und stoppen

• sudo wg-quick up wg0
• sudo wg-quick down wg0