wireguard
This commit is contained in:
parent
63915e6d4a
commit
45e81978c8
14
wireguard.md
Normal file
14
wireguard.md
Normal file
@ -0,0 +1,14 @@
|
||||
set interfaces wireguard wg0 private-key /config/auth/privatekey
|
||||
set interfaces wireguard wg0 address 10.200.254.1/24
|
||||
set interfaces wireguard wg0 route-allowed-ips true
|
||||
set interfaces wireguard wg0 listen-port 51820
|
||||
set firewall name WAN_LOCAL rule 20 action accept
|
||||
set firewall name WAN_LOCAL rule 20 protocol udp
|
||||
set firewall name WAN_LOCAL rule 20 description 'WireGuard'
|
||||
set firewall name WAN_LOCAL rule 20 destination port 51820
|
||||
set interfaces wireguard wg0 peer HMAlHHPMLvcDWhPoGbOkpDiKpZbdfkPZfIb7z6Q3XV0= allowed-ips 10.200.254.101/32
|
||||
set interfaces wireguard wg0 peer HMAlHHPMLvcDWhPoGbOkpDiKpZbdfkPZfIb7z6Q3XV0= endpoint capsulecorp.duckdns.org:29922
|
||||
set service nat rule 5010 description 'WireGuard NAT'
|
||||
set service nat rule 5010 outbound-interface eth0
|
||||
set service nat rule 5010 type masquerade
|
||||
set service nat rule 5010 source address 10.200.254.0/24
|
||||
Loading…
Reference in New Issue
Block a user