Wirguard Bestpractice

Schlüsselgenerierung

Privater Schlüssel

• PRIVKEY=$(wg genkey)
• echo $PRIVKEY

8GW6pdwT+mZaUA2EZYGHJdbK7QuWmHhig/zPptIMmHw=

Öffentlicher Schlüssel

• PUBKEY=$(echo $PRIVKEY | wg pubkey)
• echo $PUBKEY

vDr02dlHQ/yqL1YQkzS8hLz3GBLi/DO+H3PLIafRSUs=

Gemeinsamer Schlüssel

• wg pubkey > public-schnubbel.key < private.key
• wg genpsk > psk.key
• scp psk.key public-schnubbel.key gustavo:$PWD/

Server

Es wird an allen Interfaces auf 51821 gelauscht

[Interface]
#Virtuelle Adresse
Address = 10.255.44.254/24
ListenPort = 51821
#Privater Schlüssel des Servers
PrivateKey = XXXXX
MTU = 1400
PostUp =
PostDown =

[Peer]
#Öffentlicher Schlüssel des Clients
PublicKey = YYYYY
#Gemeinsamer Schlüssel
PresharedKey = ZZZZZ
AllowedIPs = 10.255.44.61/32

Client

[Interface]
Address = 10.255.44.3/24
#Privater Schlüssel des Clients
PrivateKey = WWWWW
[Peer]
#Öffentlicher Schlüssel des Servers
PublicKey = VVVVV
#Gemeinsamer Schlüssel
PresharedKey = ZZZZZ
Endpoint = 194.59.156.173:51821
PersistentKeepalive = 15
AllowedIPs = 10.255.44.0/23