a1b05f07947bae2d62e30747292d3d85ddd0dd82
howto/vyos.md
| ... | ... | @@ -14,17 +14,26 @@ _1.3-rolling-202004300117 is a known good release to work with Wireguard and DN4 |
| 14 | 14 | |
| 15 | 15 | |
| 16 | 16 | ##Wireguard |
| 17 | -1. First we need to setup keys. `generate wireguard default-keypair` |
|
| 18 | -2. Grab your public key and save it for later. This will be shared with peers. `show wireguard keypairs pubkey default` |
|
| 19 | -3. Next we need to configure our peer. They should have provided their endpoint public IP, port, and public wireguard key. |
|
| 20 | -`set interfaces wireguard wg01 address '172.x.x.x/32'` - this is a single address within your DN42 registered address space |
|
| 21 | -`set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''` - it's just easier to filter traffic with the firewall |
|
| 22 | -`set interfaces wireguard wg01 peer OtherGuy1 address 'x.x.x.x'` - this is the public IP of your peers endpoint |
|
| 23 | -`set interfaces wireguard wg01 OtherGuy1 port '12345'` - the configured port on your peers endpoint |
|
| 24 | -`set interfaces wireguard wg01 peer OtherGuy1 pubkey 'XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI='` - your peers public wireguard key |
|
| 25 | -`set interfaces wireguard wg01 port '12345'` - the port your wireguard endpoint will "listen" on |
|
| 26 | -4. In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all. |
|
| 27 | -`set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01` - this is a single provided address by your peer that is assigned to them in the registry |
|
| 17 | +1. First we need to setup keys. |
|
| 18 | +`generate wireguard default-keypair` |
|
| 19 | +2. Grab your public key and save it for later. This will be shared with peers. |
|
| 20 | +`show wireguard keypairs pubkey default` |
|
| 21 | +3. Next we need to configure our peer. They should have provided their endpoint public IP, port, DN42 address, and public wireguard key. |
|
| 22 | +`set interfaces wireguard wg01 address '172.x.x.x/32'` |
|
| 23 | +_this is a single address within your DN42 registered address space_ |
|
| 24 | +`set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''` |
|
| 25 | +_it's just easier to filter traffic with the firewall_ |
|
| 26 | +`set interfaces wireguard wg01 peer OtherGuy1 address 'x.x.x.x'` |
|
| 27 | +_this is the public IP of your peers endpoint_ |
|
| 28 | +`set interfaces wireguard wg01 OtherGuy1 port '12345' |
|
| 29 | +_the configured port on your peers endpoint_ |
|
| 30 | +`set interfaces wireguard wg01 peer OtherGuy1 pubkey 'XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI='` |
|
| 31 | +_your peers public wireguard key_ |
|
| 32 | +`set interfaces wireguard wg01 port '12345'` |
|
| 33 | +_the port your wireguard endpoint will "listen" on_ |
|
| 34 | +4. In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all. |
|
| 35 | +`set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01` |
|
| 36 | +_this is a single provided address by your peer that is assigned to them in the registry_ |
|
| 28 | 37 | |
| 29 | 38 | |
| 30 | 39 | ####Coming Soon |