equipment:fw4c_opnsense
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| equipment:fw4c_opnsense [2023/11/25 09:18] – dirk | equipment:fw4c_opnsense [2023/11/25 09:46] (current) – [Wireguard VPN] dirk | ||
|---|---|---|---|
| Line 96: | Line 96: | ||
| * Save/Apply | * Save/Apply | ||
| * go to Lobby / Dashboard and restart wireguard | * go to Lobby / Dashboard and restart wireguard | ||
| - | | + | === Create interface === |
| + | | ||
| + | * in the drop down under new interface, select the WireGuard instance (wg1) | ||
| + | * Enable: check | ||
| + | * Description: | ||
| + | * Save/ | ||
| + | * go to Interfaces / WG1 | ||
| + | * Enable: check | ||
| + | * Description: | ||
| + | * Save/ | ||
| + | === Create VPN Firewall rules === | ||
| + | * go to Firewall / Rules / WAN | ||
| + | * create new rule by clicking on the " | ||
| + | * Action: Pass | ||
| + | * Quick: check | ||
| + | * Interface: WAN | ||
| + | * Direction: in | ||
| + | * TCP/IP Version: IPv4 | ||
| + | * Protocol: UDP | ||
| + | * Source Invert: unchecked | ||
| + | * Source: any | ||
| + | * Destination Invert: unchecked | ||
| + | * Destination: | ||
| + | * Destination port range: from (other) 51820 to (other) 51820 | ||
| + | * Description: | ||
| + | * Save/ | ||
| + | * go to Firewall / Rules / [Name of interface assigned above (WG1)] | ||
| + | * create new rule by clicking on the " | ||
| + | * Action: Pass | ||
| + | * Quick: check | ||
| + | * Interface: WG1 | ||
| + | * Direction: in | ||
| + | * TCP/IP Version: IPv4 | ||
| + | * Protocol: any | ||
| + | * Source Invert: unchecked | ||
| + | * Source [Name of interface assigned above NET (WG1 net)] | ||
| + | * Destination Invert: unchecked | ||
| + | * Destination: | ||
| + | * Destination port range: any | ||
| + | * Save/ | ||
| + | === Setup Clients === | ||
| + | * This will differ based on device... principal is the same. | ||
| + | * iPhone | ||
| + | * Download WireGuard from app store | ||
| + | * create new | ||
| + | * Name: brimble.com | ||
| + | * Generate keypair | ||
| + | * This public key (PEERPUBLIC) will go in VPN / WireGuard / Settings / Peers / Public key box | ||
| + | * Addresses: This will be whatever you put in the Allowed IPs box of VPN / WireGuard / Settings / Peers (10.23.0.11/ | ||
| + | * Listen port: Automatic | ||
| + | * MTU: Automatic | ||
| + | * DNS servers: 8.8.8.8, 8.8.4.4 | ||
| + | * click Add peer | ||
| + | * Public key: MAINPUBLIC this will be in VPN / WireGuard / Settings / Instances / Public key box | ||
| + | * Preshared key: blank | ||
| + | * Endpoint: the address and port of your server (brimble.com: | ||
| + | * Allowed IPs: 0.0.0.0/0 | ||
| + | * Save | ||
| + | * macbook | ||
| + | * Downlaod WireGuard from app store | ||
| + | * create new | ||
| + | * Name: brimble.com | ||
| + | * This public key (PEERPUBLIC) will go in VPN / WireGuard / Settings / Peers / Public key box | ||
| + | * < | ||
| + | PrivateKey = whatever is there | ||
| + | Address = This will be whatever you put in the Allowed IPs box of VPN / WireGuard / Settings / Peers (10.23.0.11/ | ||
| + | DNS = 8.8.8.8, 8.8.4.4 | ||
| + | |||
| + | [Peer] | ||
| + | PublicKey = MAINPUBLIC this will be in VPN / WireGuard / Settings / Instances / Public key box | ||
| + | AllowedIPs = 0.0.0.0/0 | ||
| + | Endpoint = the address and port of your server (brimble.com: | ||
| + | </ | ||
| + | * Save | ||
| + | Link: https:// | ||
| ==== NAT for online gaming ==== | ==== NAT for online gaming ==== | ||
| * go to Firewall / Aliases | * go to Firewall / Aliases | ||
equipment/fw4c_opnsense.1700925524.txt.gz · Last modified: by dirk
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
