Home Posts About Admin

Previous Next

wireguard how to

Feb. 16, 2022, 9:39 p.m. by lufy

1. install wireguard

dnf install epel-release elrepo-release
dnf install wireguard-tools kmod-wireguard

generate key pair

wg genkey | sudo tee privatekey | wg pubkey | sudo tee /etc/wireguard/publickey

edit /etc/wireguard/tun0.conf

[Interface] PrivateKey = Paste-Server-Private-Key Address = 10.5.0.1/24 ListenPort = 51820 SaveConfig = true

enable forwarding
sysctl -w net.ipv4.ip_forward=1
sysctl -p

enable service

systemctl enable wg-quick@tun0
systemctl start wg-quick@tun0


At client

dnf install epel-release elrepo-release
dnf install wireguard-tools kmod-wireguard
wg genkey | sudo tee privatekey | wg pubkey | sudo tee /etc/wireguard/publickey

edit /etc/wireguard/tun0.conf

[Interface]

PrivateKey = CLIENT-PRIVATE-KEY

# Client address on the WireGuard network

Address = 10.5.0.2/24

[Peer]

PublicKey = SERVER-PUBLIC-KEY

# IP Address of the server on the WireGuard network 
AllowedIPs = 10.5.0.1/24

#Vultr Server Public IP and Port
Endpoint = Server-IP:51820
PersistentKeepalive = 25

Start service

systemctl start wg-quick@tun0

Add client to server

wg set tun0 peer <client public key> allowed-ips 10.5.0.2

Done.

After all, here is how to remove a peer

wg set wg0 peer <client public key> remove

Previous Next

Comment is not approved to this article.