wireguard how to lufy February 16, 2022 <p>1. install wireguard</p> <pre><code>dnf install epel-release elrepo-release</code><br /><code>dnf install wireguard-tools kmod-wireguard<br /></code></pre> <p>generate key pair</p> <p><code></code><code>wg genkey | sudo tee privatekey | wg pubkey | sudo tee /etc/wireguard/publickey</code></p> <p>edit /etc/wireguard/tun0.conf</p> <p><code>[Interface] PrivateKey = Paste-Server-Private-Key Address = 10.5.0.1/24 ListenPort = 51820 SaveConfig = true</code><br /><br />enable forwarding<br /><code>sysctl -w net.ipv4.ip_forward=1<br />sysctl -p<br /><br /></code>enable service</p> <p><code>systemctl enable wg-quick@tun0</code><br /><code>systemctl start <a href="mailto:wg-quick@tun0">wg-quick@tun0<br /><br /><br /></a></code>At client</p> <pre><code>dnf install epel-release elrepo-release</code><br /><code>dnf install wireguard-tools kmod-wireguard<br /></code><code>wg genkey | sudo tee privatekey | wg pubkey | sudo tee /etc/wireguard/publickey</code></pre> <p>edit /etc/wireguard/tun0.conf</p> <p><code></code></p> <pre><code>[Interface] PrivateKey = CLIENT-PRIVATE-KEY # Client address on the WireGuard network Address = 10.5.0.2/24 [Peer] PublicKey = SERVER-PUBLIC-KEY # IP Address of the server on the WireGuard network AllowedIPs = 10.5.0.1/24 #Vultr Server Public IP and Port Endpoint = Server-IP:51820<br />PersistentKeepalive = 25<br /></code></pre> <p><code></code></p> <p><code></code>Start service</p> <p><code>systemctl start wg-quick@tun0</code><br /><br />Add client to server</p> <p><code>wg set tun0 peer <client public key> allowed-ips 10.5.0.2<br /><br /></code>Done.</p> <p>After all, here is how to remove a peer</p> <p>wg <span class="pl-c1">set</span> wg0 peer <client public key> remove</p> <p><code></code></p> <pre><code></code></pre>
Comments (0)
Leave a Comment
No comments yet. Be the first to comment!