wiki/wiki
1
0
Fork 0
mirror of https://git.dn42.dev/wiki/wiki synced 2025-03-14 11:33:33 +00:00
Code Issues Releases Wiki Activity

Updated vyos (markdown)

Browse Source
This commit is contained in:
DN42 Wiki (BURBLE-MNT) 2020-05-27 03:07:43 +00:00
parent a1b05f0794
commit 3103f31ccd
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
howto/vyos.md
View File

@ -14,11 +14,12 @@ _1.3-rolling-202004300117 is a known good release to work with Wireguard and DN4
##Wireguard ##Wireguard
1. First we need to setup keys. ###Setup Keys
`generate wireguard default-keypair` `generate wireguard default-keypair`
2. Grab your public key and save it for later. This will be shared with peers.
`show wireguard keypairs pubkey default` `show wireguard keypairs pubkey default`
3. Next we need to configure our peer. They should have provided their endpoint public IP, port, DN42 address, and public wireguard key. _Grab your public key and save it for later. This will be shared with peers._
###Configure Peer Tunnel
_They should have provided their endpoint public IP, port, DN42 address, and public wireguard key._
`set interfaces wireguard wg01 address '172.x.x.x/32'` `set interfaces wireguard wg01 address '172.x.x.x/32'`
_this is a single address within your DN42 registered address space_ _this is a single address within your DN42 registered address space_
`set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''` `set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''`
@ -31,7 +32,8 @@ _the configured port on your peers endpoint_
_your peers public wireguard key_ _your peers public wireguard key_
`set interfaces wireguard wg01 port '12345'` `set interfaces wireguard wg01 port '12345'`
_the port your wireguard endpoint will "listen" on_ _the port your wireguard endpoint will "listen" on_
4. In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all. ###Set Static Route
_In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all._
`set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01` `set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01`
_this is a single provided address by your peer that is assigned to them in the registry_ _this is a single provided address by your peer that is assigned to them in the registry_