WireGuard
WireGuard is a simple but fast VPN. It aims to be faster, simpler, and leaner than the IPsec protocol. It intends to be more performant than the well-known RAKwireless - OpenVPN. Before, it was not possible to use the WireGuard protocol on the RAKwireless gateways, but that is not the case now.
The new WisGateOS 2 now offers Extension features, where you can install and set up the WireGuard extension. In this tutorial, you will learn how to set the WireGuard client on the gateway.
This guide assumes that you have some knowledge in setting up a WireGuard server and have a WireGuard server set up.
Install the WireGuard Extension
To install the extension, follow the steps in Add an Extension section.
Configure the WireGuard Extension
- To access the WireGuard extension, click Launch.
Figure 1: Launch the WireGuard Extension- In the Configuration page, enable the Enable WireGuard switch and configure the following information:
-
Interface: Settings for the WireGuard client.
- Address with netmask: The address used by the WireGuard client. It must be in the same range (e.g.,
10.0.8.0to10.0.8.255) defined by the server. - Generate key pair: Automatically generates the key pair.
- Public key: The public key of the WireGuard client.
- Private key: The private key of the WireGuard client.
NOTE
Do not share your private key with anyone.
- Address with netmask: The address used by the WireGuard client. It must be in the same range (e.g.,
-
Server: Settings for the WireGuard server.
- Endpoint Host: The IP address of the machine or cloud service where the WireGuard server is hosted.
- Endpoint Port: The port used for WireGuard traffic.
- Persistent Keepalive (ms): The interval at which keepalive packets are sent to maintain the connection.
- Public Key: The public key of the WireGuard server.
- Enable Preshared Key: Enables the preshared key field. This key is used as part of the Noise protocol during encrypted connection setup between the two peers.
Figure 1: Enable preshared key -
Route All Traffic: Allows traffic from all IPs.
- Allowed IPs: Specifies the IPs that are allowed to connect to the gateway via the WireGuard IP. This option is only available when Route All Traffic is disabled.
Figure 1: Configuration page-
To save the changes, click Save changes.
NOTERemember to add the WireGuard Client credentials to the WireGuard server configuration.
-
After the connection is established, open the Status tab to view the WireGuard connection.
Figure 1: WireGuard status
