The ungleich VPN infrastructure » History » Version 3
Nico Schottelius, 01/23/2019 03:15 PM
| 1 | 1 | Nico Schottelius | h1. The ungleich VPN infrastructure |
|---|---|---|---|
| 2 | |||
| 3 | h2. Wireguard on vpn-2a0ae5c1.ungleich.ch |
||
| 4 | |||
| 5 | * Server: vpn-2a0ae5c1.ungleich.ch |
||
| 6 | * Port: 51820 |
||
| 7 | * Requires a public key |
||
| 8 | * Client network: |
||
| 9 | * Client network size: /48 |
||
| 10 | |||
| 11 | 2 | Nico Schottelius | h3. Sample server configuration |
| 12 | |||
| 13 | 3 | Nico Schottelius | /etc/wireguard/wg0.conf: |
| 14 | |||
| 15 | 2 | Nico Schottelius | <pre> |
| 16 | [Interface] |
||
| 17 | ListenPort = 51820 |
||
| 18 | PrivateKey = OEZPTrd6eh8rfh/jhZYyikboPT3fClRJjOjx4iA5NFg= |
||
| 19 | |||
| 20 | # Nico, 2019-01-23 |
||
| 21 | [Peer] |
||
| 22 | PublicKey = kL1S/Ipq6NkFf1MAsNRou4b9VoUsnnb4ZxgiBrH0zA8= |
||
| 23 | AllowedIPs = 2a0a:e5c1:101::/48 |
||
| 24 | |||
| 25 | # Customer networks below |
||
| 26 | # ... |
||
| 27 | </pre> |
||
| 28 | |||
| 29 | Sample server rc.local: |
||
| 30 | |||
| 31 | <pre> |
||
| 32 | ip link add dev wg0 type wireguard |
||
| 33 | ip addr add 2a0a:e5c1:100::1/40 dev wg0 |
||
| 34 | wg setconf wg0 /etc/wireguard/wg0.conf |
||
| 35 | ip link set wg0 up |
||
| 36 | |||
| 37 | </pre> |
||
| 38 | |||
| 39 | |||
| 40 | |||
| 41 | h3. Sample client configuration: |
||
| 42 | 1 | Nico Schottelius | |
| 43 | <pre> |
||
| 44 | [Interface] |
||
| 45 | PrivateKey = YOURKEYHERE |
||
| 46 | ListenPort = 51280 |
||
| 47 | |||
| 48 | [Peer] |
||
| 49 | PublicKey = 94WZhiEjyWnnymzA5OQcR34/IKkv1dgHf2JPsi5KzGU= |
||
| 50 | Endpoint = vpn-2a0ae5c1.ungleich.ch:51820 |
||
| 51 | AllowedIPs = ::/0 |
||
| 52 | </pre> |
||
| 53 | |||
| 54 | |||
| 55 | h2. OpenVPN on openvpn.ungleich.ch |
||
| 56 | |||
| 57 | * Server: openvpn.ungleich.ch |
||
| 58 | * Port: 1195 |
||
| 59 | * Requires a certificate |
||
| 60 | * Address range: 2a0a:e5c0:3::/48 |
||
| 61 | ** Client networks are /64 |