adf6d8a1d2e8f314e0efae5530b431e4cfe89378
howto/vyos.md
... | ... | @@ -18,25 +18,28 @@ _1.3-rolling-202004300117 is a known good release to work with Wireguard and DN4 |
18 | 18 | `generate wireguard default-keypair` |
19 | 19 | `show wireguard keypairs pubkey default` |
20 | 20 | _Grab your public key and save it for later. This will be shared with peers._ |
21 | -###Configure Peer Tunnel |
|
22 | -_They should have provided their endpoint public IP, port, DN42 address, and public wireguard key._ |
|
21 | +###Configure Peer Tunnel |
|
22 | +Your peer should provide their endpoint public IP, port, single DN42 address, and Wireguard public key. |
|
23 | + |
|
23 | 24 | `set interfaces wireguard wg01 address '172.x.x.x/32'` |
24 | 25 | _this is a single address within your DN42 registered address space_ |
25 | 26 | `set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''` |
26 | 27 | _it's just easier to filter traffic with the firewall_ |
27 | 28 | `set interfaces wireguard wg01 peer OtherGuy1 address 'x.x.x.x'` |
28 | 29 | _this is the public IP of your peers endpoint_ |
29 | -`set interfaces wireguard wg01 OtherGuy1 port '12345' |
|
30 | +`set interfaces wireguard wg01 OtherGuy1 port '12345'` |
|
30 | 31 | _the configured port on your peers endpoint_ |
31 | 32 | `set interfaces wireguard wg01 peer OtherGuy1 pubkey 'XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI='` |
32 | 33 | _your peers public wireguard key_ |
33 | 34 | `set interfaces wireguard wg01 port '12345'` |
34 | 35 | _the port your wireguard endpoint will "listen" on_ |
35 | -###Set Static Route |
|
36 | -_In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all._ |
|
36 | +###Set Static Route |
|
37 | +In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all. |
|
38 | + |
|
37 | 39 | `set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01` |
38 | 40 | _this is a single provided address by your peer that is assigned to them in the registry_ |
39 | - |
|
41 | + |
|
42 | +While a normal world configuration may allow multiple peers on one Wireguard interface, this configuration will not work correctly if multiple peers are defined on the same interface. |
|
40 | 43 | |
41 | 44 | ####Coming Soon |
42 | 45 |