Update wireward config

This commit is contained in:
keteflips 2025-10-10 19:25:02 +02:00
parent 8947f7abbd
commit 3a138f1cfe

View File

@ -8,33 +8,44 @@ wg genkey | tee privatekey | wg pubkey > publickey
## CONFIGURE
```sh
configure
```
### Configure server
```sh
set interfaces wireguard wg0 private-key /config/auth/privatekey
set interfaces wireguard wg0 address 10.200.254.1/24
set interfaces wireguard wg0 route-allowed-ips true
set interfaces wireguard wg0 listen-port 51820
```
### Configure peer (clientes)
```sh
set interfaces wireguard wg0 peer HMAlHHPMLvcDWhPoGbOkpDiKpZbdfkPZfIb7z6Q3XV0= allowed-ips 10.200.254.101/32
set interfaces wireguard wg0 peer HMAlHHPMLvcDWhPoGbOkpDiKpZbdfkPZfIb7z6Q3XV0= endpoint capsulecorp.duckdns.org:29922
set interfaces wireguard wg0 peer HMAlHHPMLvcDWhPoGbOkpDiKpZbdfkPZfIb7z6Q3XV0= persistent-keepalive 25
```
### Configure Firewall
```sh
set firewall name WAN_LOCAL rule 20 action accept
set firewall name WAN_LOCAL rule 20 protocol udp
set firewall name WAN_LOCAL rule 20 description 'WireGuard'
set firewall name WAN_LOCAL rule 20 destination port 51820
```
### Configure NAT
```sh
set service nat rule 5010 description 'WireGuard NAT'
set service nat rule 5010 outbound-interface eth0
set service nat rule 5010 type masquerade
set service nat rule 5010 source address 10.200.254.0/24
```
### Save changes
```sh
commit
save
exit
```