The ungleich VPN infrastructure » History » Version 2
Nico Schottelius, 01/23/2019 03:15 PM
| 1 | 1 | Nico Schottelius | h1. The ungleich VPN infrastructure |
|---|---|---|---|
| 2 | |||
| 3 | h2. Wireguard on vpn-2a0ae5c1.ungleich.ch |
||
| 4 | |||
| 5 | * Server: vpn-2a0ae5c1.ungleich.ch |
||
| 6 | * Port: 51820 |
||
| 7 | * Requires a public key |
||
| 8 | * Client network: |
||
| 9 | * Client network size: /48 |
||
| 10 | |||
| 11 | 2 | Nico Schottelius | h3. Sample server configuration |
| 12 | |||
| 13 | <pre> |
||
| 14 | [Interface] |
||
| 15 | ListenPort = 51820 |
||
| 16 | PrivateKey = OEZPTrd6eh8rfh/jhZYyikboPT3fClRJjOjx4iA5NFg= |
||
| 17 | |||
| 18 | # Nico, 2019-01-23 |
||
| 19 | [Peer] |
||
| 20 | PublicKey = kL1S/Ipq6NkFf1MAsNRou4b9VoUsnnb4ZxgiBrH0zA8= |
||
| 21 | AllowedIPs = 2a0a:e5c1:101::/48 |
||
| 22 | |||
| 23 | # Customer networks below |
||
| 24 | # ... |
||
| 25 | </pre> |
||
| 26 | |||
| 27 | Sample server rc.local: |
||
| 28 | |||
| 29 | <pre> |
||
| 30 | ip link add dev wg0 type wireguard |
||
| 31 | ip addr add 2a0a:e5c1:100::1/40 dev wg0 |
||
| 32 | wg setconf wg0 /etc/wireguard/wg0.conf |
||
| 33 | ip link set wg0 up |
||
| 34 | |||
| 35 | </pre> |
||
| 36 | |||
| 37 | |||
| 38 | |||
| 39 | h3. Sample client configuration: |
||
| 40 | 1 | Nico Schottelius | |
| 41 | <pre> |
||
| 42 | [Interface] |
||
| 43 | PrivateKey = YOURKEYHERE |
||
| 44 | ListenPort = 51280 |
||
| 45 | |||
| 46 | [Peer] |
||
| 47 | PublicKey = 94WZhiEjyWnnymzA5OQcR34/IKkv1dgHf2JPsi5KzGU= |
||
| 48 | Endpoint = vpn-2a0ae5c1.ungleich.ch:51820 |
||
| 49 | AllowedIPs = ::/0 |
||
| 50 | </pre> |
||
| 51 | |||
| 52 | |||
| 53 | h2. OpenVPN on openvpn.ungleich.ch |
||
| 54 | |||
| 55 | * Server: openvpn.ungleich.ch |
||
| 56 | * Port: 1195 |
||
| 57 | * Requires a certificate |
||
| 58 | * Address range: 2a0a:e5c0:3::/48 |
||
| 59 | ** Client networks are /64 |