Project

General

Profile

The ungleich VPN infrastructure » History » Version 7

Nico Schottelius, 01/23/2019 03:35 PM

1 1 Nico Schottelius
h1. The ungleich VPN infrastructure
2
3 5 Nico Schottelius
{{toc}}
4
5 1 Nico Schottelius
h2. Wireguard on vpn-2a0ae5c1.ungleich.ch
6
7
* Server: vpn-2a0ae5c1.ungleich.ch
8
* Port: 51820
9
* Requires a public key
10 7 Nico Schottelius
* Client network: 2a0a:e5c1:100::/40
11 1 Nico Schottelius
* Client network size: /48
12
13 2 Nico Schottelius
14 1 Nico Schottelius
h3. Sample client configuration:
15
16 4 Nico Schottelius
/etc/wireguard/wg0.conf:
17
18 1 Nico Schottelius
<pre>
19
[Interface]
20
PrivateKey = YOURKEYHERE
21
ListenPort = 51280
22
23
[Peer]
24
PublicKey = 94WZhiEjyWnnymzA5OQcR34/IKkv1dgHf2JPsi5KzGU=
25
Endpoint = vpn-2a0ae5c1.ungleich.ch:51820
26
AllowedIPs = ::/0
27
</pre>
28
29
Commands for setting it up
30
31
<pre>
32
MY_NET=2a0a:e5c1:XXXX::1/48
33
34
ip link add dev wg0 type wireguard
35
36
# Replace with your range
37
ip addr add $MY_NET dev wg0
38
39
# Add routing
40
ip route add 2a0a:e5c1:100::/40 dev wg0
41
ip route add ::/0 via 2a0a:e5c1:100::1
42
43
# Configure the interface
44
wg setconf wg0 /etc/wireguard/wg0.conf
45
46
# Bring it up
47
ip link set wg0 up
48
</pre>
49
50
Debugging
51
52
* wg show
53
* ping 2a0a:e5c1:100::1
54 6 Nico Schottelius
55
56
h3. Sample server configuration
57
58
/etc/wireguard/wg0.conf:
59
60
<pre>
61
[Interface]
62
ListenPort = 51820
63 7 Nico Schottelius
PrivateKey = SERVERKEYHERE
64 6 Nico Schottelius
65
# Nico, 2019-01-23
66
[Peer]
67
PublicKey = kL1S/Ipq6NkFf1MAsNRou4b9VoUsnnb4ZxgiBrH0zA8=
68
AllowedIPs = 2a0a:e5c1:101::/48
69
70
# Customer networks below
71
# ...
72
</pre>
73
74
Sample server rc.local:
75
76
<pre>
77
ip link add dev wg0 type wireguard
78
ip addr add 2a0a:e5c1:100::1/40 dev wg0
79
wg setconf wg0 /etc/wireguard/wg0.conf
80
ip link set wg0 up
81
82
</pre>
83 1 Nico Schottelius
84
85
h2. OpenVPN on openvpn.ungleich.ch
86
87
* Server: openvpn.ungleich.ch
88
* Port: 1195
89
* Requires a certificate
90
* Address range: 2a0a:e5c0:3::/48
91
** Client networks are /64