Wireguard Server for Roadwarrior: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 3: Zeile 3:
 
*VPNSERVER=192.168.y.1xx
 
*VPNSERVER=192.168.y.1xx
 
*SERVER=172.17.1xx.0/24
 
*SERVER=172.17.1xx.0/24
*SERVER=172.16.1xx.0/24
+
*LAN=172.16.1xx.0/24
 
==Schlüsselgenerierung==
 
==Schlüsselgenerierung==
 
*S_PRIVKEY=$(wg genkey)
 
*S_PRIVKEY=$(wg genkey)

Version vom 12. April 2025, 21:07 Uhr

Configuration

  • PORT=44711
  • VPNSERVER=192.168.y.1xx
  • SERVER=172.17.1xx.0/24
  • LAN=172.16.1xx.0/24

Schlüsselgenerierung

  • S_PRIVKEY=$(wg genkey)
  • S_PUBKEY=$(echo $S_PRIVKEY | wg pubkey)
  • C_PRIVKEY=$(wg genkey)
  • C_PUBKEY=$(echo $C_PRIVKEY | wg pubkey)

VPNServer

  • cat<<HERE >/etc/wireguard/wg0.conf
[Interface]
Address =  10.79.254.1/24
PrivateKey = $S_PRIVKEY
#PublicKey = $S_PUBKEY
ListenPort = $PORT

[Peer]
PublicKey = $C_PUBKEY
#PrivateKey = $C_PRIVKEY
AllowedIPs = 10.79.254.11/32
HERE

Clients

Android

On server

generating the keys
  • mkdir /etc/wireguard/client1
  • cd /etc/wireguard/client1
  • cat<<HERE > wg0.conf
[Interface]
Address = 10.79.254.11/24
PrivateKey = $C_PRIVKEY
DNS = 8.8.8.8

[Peer]
PublicKey = $S_PUBKEY
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = $SERVER:$PORT
HERE

Hier geht es mit QR Code

generate the qrcode
  • qrencode -t utf8 < client1.conf

Links