OpenWRT WireGuard VPN Server Tutorial - Revision history

AdminKB42 at 15:33, 14 February 2024

2024-02-14T15:33:42Z

← Older revision		Revision as of 15:33, 14 February 2024
Line 108:		Line 108:

	(protip: The WireGuard app has it's own quick settings tile, so you can add it to your quick settings panel for ease of access)		(protip: The WireGuard app has it's own quick settings tile, so you can add it to your quick settings panel for ease of access)


			{{article summary
			\| image =
			\| title = {{%PAGENAME%}}
			\| summary = Set up a WireGuard VPN on a Raspberry Pi 3/4 running OpenWRT. It should work on any device running a recent-ish build of OpenWRT/LEDE, provided you have enough storage space for it.
			}}

	[[Category:Technology]]		[[Category:Technology]]

2023-10-26T00:57:39Z

2023-10-26T00:56:32Z

2023-10-26T00:49:43Z

Step 2: Creating a firewall rule

← Older revision		Revision as of 00:49, 26 October 2023
Line 28:		Line 28:

	Create a new rule using the following input:		Create a new rule using the following input:
			<syntaxhighlight lang="bash">
	Name: WireGuard		Name: WireGuard
	Protocol: UDP		Protocol: UDP
Line 36:		Line 36:
	Internal IP Address: <The IP address of your device, mine is 192.168.1.1>		Internal IP Address: <The IP address of your device, mine is 192.168.1.1>
	Internal Port: 1234		Internal Port: 1234
			</syntaxhighlight>
	Click Add, then Save & Apply. This allows your VPN clients (Phone, Laptop etc) to connect to your OpenWRT device from the internet.		Click Add, then Save & Apply. This allows your VPN clients (Phone, Laptop etc) to connect to your OpenWRT device from the internet.

2023-10-26T00:48:11Z

Step 4: Setting up the WireGuard interface

← Older revision		Revision as of 00:48, 26 October 2023
Line 67:		Line 67:
	Go to the Firewall Settings tab and assign the interface to your LAN zone if it's not automatically been assigned. This will enable you to access your LAN devices when you're connected to your VPN. If you want to keep your devices seperate, you can create another Firewall zone specifically for the WireGuard Interface.		Go to the Firewall Settings tab and assign the interface to your LAN zone if it's not automatically been assigned. This will enable you to access your LAN devices when you're connected to your VPN. If you want to keep your devices seperate, you can create another Firewall zone specifically for the WireGuard Interface.

	Click Save & Apply		Click Save & Apply

	==Step 5: Setting up the VPN connection on an Android device==		==Step 5: Setting up the VPN connection on an Android device==

2023-10-26T00:47:56Z

Step 3: Generating the keys

← Older revision		Revision as of 00:47, 26 October 2023
Line 43:		Line 43:
	SSH into your OpenWRT device and run the following:		SSH into your OpenWRT device and run the following:

			<syntaxhighlight lang="bash">
	umask 077 && wg genkey > privkey		umask 077 && wg genkey > privkey
	cat privkey \| wg pubkey > pubkey		cat privkey \| wg pubkey > pubkey
	cat /root/pubkey		cat /root/pubkey
	cat /root/privkey		cat /root/privkey
			</syntaxhighlight>
	This creates two files in the /root/ directory of your device, pubkey and privkey.		This creates two files in the /root/ directory of your device, pubkey and privkey.

	You should email yourself the pubkey or transfer it securely to your phone somehow because you'll need it when setting up the VPN connection.		You should email yourself the pubkey or transfer it securely to your phone somehow because you'll need it when setting up the VPN connection.

	Copy the private key to your clipboard because you'll need it for Step 4.		Copy the private key to your clipboard because you'll need it for Step 4.

	== Step 4: Setting up the WireGuard interface ==		== Step 4: Setting up the WireGuard interface ==

2023-10-26T00:47:04Z

Step 1: Installing the packages

← Older revision		Revision as of 00:47, 26 October 2023
Line 13:		Line 13:
	SSH into your OpenWRT device and run the following:		SSH into your OpenWRT device and run the following:

	<~~code~~>		<syntaxhighlight lang="bash">
	opkg update		opkg update

Line 19:		Line 19:

	reboot		reboot
	</~~code~~>		</syntaxhighlight>

	(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)		(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)

	~~<syntaxhighlight lang="bash">~~
	~~opkg update~~

	~~opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools~~

	~~reboot~~
	~~</syntaxhighlight>~~

	==Step 2: Creating a firewall rule==		==Step 2: Creating a firewall rule==

2023-10-26T00:46:37Z

Step 1: Installing the packages

← Older revision		Revision as of 00:46, 26 October 2023
Line 22:		Line 22:

	(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)		(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)

			<syntaxhighlight lang="bash">
			opkg update

			opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools

			reboot
			</syntaxhighlight>

	==Step 2: Creating a firewall rule==		==Step 2: Creating a firewall rule==

2023-10-26T00:40:38Z

Step 1: Installing the packages

← Older revision		Revision as of 00:40, 26 October 2023
Line 15:		Line 15:
	<code>		<code>
	opkg update		opkg update

	opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools		opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools

	reboot		reboot
	</code>		</code>

2023-10-26T00:39:48Z

Step 1: Installing the packages

← Older revision		Revision as of 00:39, 26 October 2023
Line 13:		Line 13:
	SSH into your OpenWRT device and run the following:		SSH into your OpenWRT device and run the following:

	~~```~~code		<code>
	opkg update		opkg update
	opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools		opkg install luci-proto-wireguard luci-app-wireguard wireguard kmod-wireguard wireguard-tools
	reboot		reboot
	~~```~~		</code>

	(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)		(protip: Windows 10 has built in SSH support if you don't have PuTTY installed. You can also use LuCI to install these packages by going to System>Software)