The Easiest Tunnel Ever - Revision history http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&action=history Revision history for this page on the wiki en MediaWiki 1.10.1 Thu, 28 Mar 2024 19:36:30 GMT Kernel-panic69: (add note to point to documentation in the forum) http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=56802&oldid=prev <p>(add note to point to documentation in the forum)</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:06, 4 February 2024</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">{{Languages|The Easiest Tunnel Ever}}</td><td> </td><td style="background: #eee; font-size: smaller;">{{Languages|The Easiest Tunnel Ever}}</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''NOTE: The most updated WireGuard documentation is currently in the forum: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=327397 WireGuard guides and documentation]''' </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">__TOC__</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">This [[Wireguard]] tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </td><td> </td><td style="background: #eee; font-size: smaller;">This [[Wireguard]] tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </td></tr> </table> Sun, 04 Feb 2024 22:06:04 GMT Kernel-panic69 http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Biant at 19:19, 2 June 2020 http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=55668&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:19, 2 June 2020</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">{{Languages|The Easiest Tunnel Ever}}</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">This [[Wireguard]] tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </td><td> </td><td style="background: #eee; font-size: smaller;">This [[Wireguard]] tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </td></tr> </table> Tue, 02 Jun 2020 19:19:54 GMT Biant http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Mile-Lile: Undo revision 55343 by Jeremywh7 (Talk) http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=55345&oldid=prev <p>Undo revision 55343 by <a href="/wiki/index.php/Special:Contributions/Jeremywh7" title="Special:Contributions/Jeremywh7">Jeremywh7</a> (<a href="/wiki/index.php?title=User_talk:Jeremywh7&amp;action=edit" class="new" title="User talk:Jeremywh7">Talk</a>)</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 08:37, 17 January 2020</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[VPN]] -&gt; [[Wireguard]] -&gt; '''[[The Easiest Tunnel Ever]]'''&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">__TOC__</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">This [[Wireguard]] guide will show you the basics of creating tunnel from <del style="color: red; font-weight: bold; text-decoration: none;">a client </del>device to <del style="color: red; font-weight: bold; text-decoration: none;">DD</del>-<del style="color: red; font-weight: bold; text-decoration: none;">WRT </del>unit in a secure way<del style="color: red; font-weight: bold; text-decoration: none;">. Before proceeding, verify a working reset button and configuration backup in case of problems</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;">This [[Wireguard]] <ins style="color: red; font-weight: bold; text-decoration: none;">tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">This </ins>guide will show you the basics of creating tunnel from <ins style="color: red; font-weight: bold; text-decoration: none;">your Android/iOS </ins>device to <ins style="color: red; font-weight: bold; text-decoration: none;">dd</ins>-<ins style="color: red; font-weight: bold; text-decoration: none;">wrt </ins>unit in a secure way. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Image:oet1.PNG|<del style="color: red; font-weight: bold; text-decoration: none;">600px</del>|Instructions]]</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">[[Image:benchmark.PNG|thumbnail|Why WireGuard?]]</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Image:oet1.PNG|<ins style="color: red; font-weight: bold; text-decoration: none;">thumbnail</ins>|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:QR-Code.PNG|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:QR-Code.PNG|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Android.jpeg|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Android.jpeg|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Enable.jpeg|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Enable.jpeg|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:DecodeQRcode.PNG|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:DecodeQRcode.PNG|thumbnail|Instructions]]</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Image:Vpn.jpg|thumbnail|Instructions]]</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Image:Blabla.png|thumbnail|Instructions]]</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">==Why WireGuard?==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://www.wireguard.com/ WireGuard®] is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">It intends to be considerably more performant than OpenVPN.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Why WireGuard + DD-WRT tunnel?==</td><td> </td><td style="background: #eee; font-size: smaller;">==Why WireGuard + DD-WRT tunnel?==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Starting <del style="color: red; font-weight: bold; text-decoration: none;">since build 38581 in </del>February 2019, a client config can be imported using QR Code. The advantage of this approach is that there is no need to transfer sensitive information via data channels that can potentially be compromised</td><td>+</td><td style="background: #cfc; font-size: smaller;">Starting <ins style="color: red; font-weight: bold; text-decoration: none;">from </ins>February 2019 <ins style="color: red; font-weight: bold; text-decoration: none;">and courtesy of BrainSlayer (Sebastian Gottschall, lead dd-wrt developer)</ins>, a client config can be imported <ins style="color: red; font-weight: bold; text-decoration: none;">to Android/iOS in a very simple way </ins>using QR Code<ins style="color: red; font-weight: bold; text-decoration: none;">.</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">and there is no need of any other supplementary software besides WireGuard and <del style="color: red; font-weight: bold; text-decoration: none;">the </del>DD-WRT GUI.</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">No more complicated key generation, copy-paste and other headaches</ins>. The advantage of this approach is that there is no need to transfer sensitive information via data channels that can potentially be compromised</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">and there is no need of any other supplementary software besides <ins style="color: red; font-weight: bold; text-decoration: none;">a </ins>WireGuard <ins style="color: red; font-weight: bold; text-decoration: none;">app (Android/iOS) </ins>and DD-WRT GUI.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==What is a QR Code?==</td><td> </td><td style="background: #eee; font-size: smaller;">==What is a QR Code?==</td></tr> <tr><td colspan="2" align="left"><strong>Line 26:</strong></td> <td colspan="2" align="left"><strong>Line 31:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Instructions=</td><td> </td><td style="background: #eee; font-size: smaller;">=Instructions=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Creating tunnel==</td><td> </td><td style="background: #eee; font-size: smaller;">==Creating tunnel==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">First, enable the tunnel on the DD-WRT <del style="color: red; font-weight: bold; text-decoration: none;">''Basic'' -&gt; ''Tunnels'' tab </del>(eop-tunnel.asp). From the ''Protocol Type'' drop-down menu, choose WireGuard. Generate Key and enter IP Address (this will be oet1 interface ip and must be out of your local lan range, on a separate network.</td><td>+</td><td style="background: #cfc; font-size: smaller;">First, enable the tunnel on the DD-WRT <ins style="color: red; font-weight: bold; text-decoration: none;">EOP Tunnel page </ins>(<ins style="color: red; font-weight: bold; text-decoration: none;">http://your_router_ip/</ins>eop-tunnel.asp).</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*</del>E.g. if <del style="color: red; font-weight: bold; text-decoration: none;">the </del>router LAN IP is 192.168.2.1, for <del style="color: red; font-weight: bold; text-decoration: none;">the oet1 </del>IP address <del style="color: red; font-weight: bold; text-decoration: none;">use </del>10.10.0.1.</td><td>+</td><td style="background: #cfc; font-size: smaller;">From the ''Protocol Type'' drop-down menu, choose WireGuard. Generate Key and enter IP Address (this will be oet1 interface ip and must be out of your local lan range, on a separate network.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">E.g. if <ins style="color: red; font-weight: bold; text-decoration: none;">your </ins>router LAN IP is 192.168.2.1, for <ins style="color: red; font-weight: bold; text-decoration: none;">an </ins>IP address <ins style="color: red; font-weight: bold; text-decoration: none;">of oet1 put </ins>10.10.0.1.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td></tr> <tr><td colspan="2" align="left"><strong>Line 33:</strong></td> <td colspan="2" align="left"><strong>Line 39:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Wireguard cannot bridge anything<del style="color: red; font-weight: bold; text-decoration: none;">, you </del>always have <del style="color: red; font-weight: bold; text-decoration: none;">use Forward </del>and <del style="color: red; font-weight: bold; text-decoration: none;">NAT</del>. <del style="color: red; font-weight: bold; text-decoration: none;">Go </del>to Networking and unbridge <del style="color: red; font-weight: bold; text-decoration: none;">the </del>oet1 interface and enable Masquerade / NAT <del style="color: red; font-weight: bold; text-decoration: none;">to </del>have internet on other side of <del style="color: red; font-weight: bold; text-decoration: none;">the </del>tunnel<del style="color: red; font-weight: bold; text-decoration: none;">. Click ''Apply''</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">The disadvantage of </ins>Wireguard <ins style="color: red; font-weight: bold; text-decoration: none;">is that you </ins>cannot bridge anything<ins style="color: red; font-weight: bold; text-decoration: none;">. You </ins>always have <ins style="color: red; font-weight: bold; text-decoration: none;">to forward </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">do nat</ins>. <ins style="color: red; font-weight: bold; text-decoration: none;">No other way!</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">So, head </ins>to Networking<ins style="color: red; font-weight: bold; text-decoration: none;">.asp </ins>and unbridge oet1 interface and enable Masquerade / NAT<ins style="color: red; font-weight: bold; text-decoration: none;">. Apply. This way, you'll </ins>have internet on other side of <ins style="color: red; font-weight: bold; text-decoration: none;">your </ins>tunnel.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">=</del>===Note for Access Point mode<del style="color: red; font-weight: bold; text-decoration: none;">=</del>===</td><td>+</td><td style="background: #cfc; font-size: smaller;">===Note for Access Point mode===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Add the following firewall rule under Administration/Commands and save as firewall then reboot:</td><td> </td><td style="background: #eee; font-size: smaller;">Add the following firewall rule under Administration/Commands and save as firewall then reboot:</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td></tr> <tr><td colspan="2" align="left"><strong>Line 46:</strong></td> <td colspan="2" align="left"><strong>Line 53:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[https://itunes.apple.com/us/app/wireguard/id1441195209 Apple iOS (iOS 12.0 or later)]</td><td> </td><td style="background: #eee; font-size: smaller;">[https://itunes.apple.com/us/app/wireguard/id1441195209 Apple iOS (iOS 12.0 or later)]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Importing config to <del style="color: red; font-weight: bold; text-decoration: none;">Linux</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">==Importing config to <ins style="color: red; font-weight: bold; text-decoration: none;">desktop (ArchLinux)</ins>==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">These </del>packages <del style="color: red; font-weight: bold; text-decoration: none;">are needed:</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">First of all, we'll need some </ins>packages <ins style="color: red; font-weight: bold; text-decoration: none;">to be installed.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* networkmanager-wireguard-git (dkms)</td><td> </td><td style="background: #eee; font-size: smaller;">* networkmanager-wireguard-git (dkms)</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* A <del style="color: red; font-weight: bold; text-decoration: none;">graphical </del>QRCode decoder <del style="color: red; font-weight: bold; text-decoration: none;">e</del>.<del style="color: red; font-weight: bold; text-decoration: none;">g</del>. '''qtqr''' </td><td>+</td><td style="background: #cfc; font-size: smaller;">* <ins style="color: red; font-weight: bold; text-decoration: none;">'''qtqr''' - </ins>A <ins style="color: red; font-weight: bold; text-decoration: none;">Graphical interface </ins>QRCode decoder </td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* <del style="color: red; font-weight: bold; text-decoration: none;">Screenshot tool e</del>.<del style="color: red; font-weight: bold; text-decoration: none;">g</del>. [https://<del style="color: red; font-weight: bold; text-decoration: none;">flameshot</del>.<del style="color: red; font-weight: bold; text-decoration: none;">js</del>.<del style="color: red; font-weight: bold; text-decoration: none;">org</del>/<del style="color: red; font-weight: bold; text-decoration: none;">#</del>/ <del style="color: red; font-weight: bold; text-decoration: none;">flameshot</del>]</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* [https://flameshot</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">js</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">org/#/ flameshot] </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">You can use console or Pamac. It's your choice:) Go to the eop-tunnel.asp of you router,</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">and use flameshot to select area of qrcode and grab screenshot.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Save it but remember location and name of png file. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Open </ins>'''qtqr''' <ins style="color: red; font-weight: bold; text-decoration: none;">and add png file (choose Decode from file).</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">You will be prompted with decoded txt config file. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Use it to populate wireguard client side config in network manager.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Importing config to desktop (Windows)==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">You'll need some additional softwares.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* <ins style="color: red; font-weight: bold; text-decoration: none;">[https://www</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">wireguard</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">com/install/?downloadwindowsprealpha=1 Windows.msi] </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* </ins>[https://<ins style="color: red; font-weight: bold; text-decoration: none;">www</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">codetwo</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">com</ins>/<ins style="color: red; font-weight: bold; text-decoration: none;">freeware</ins>/<ins style="color: red; font-weight: bold; text-decoration: none;">qr-code-desktop-reader/ CodeTwo QR Code Reader</ins>] </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">This Windows Pre-alpha is in testing phase see [https://lists.zx2c4.com/pipermail/wireguard/2019-May/004126.html Announce]</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">If you find any bugs write report back to team@wireguard.com</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=Troubleshooting=</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Dynamic WAN IP on router==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">After importing configs from ddwrt to Android/iOS app you can edit peer section (tap on pencil in upper right corner) - Endpoint.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Enter something like this Endpoint = my.ddns.address.com:51820. This way you will be able to access your router even after reboot and changing IP.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Adding a second peer breaks the first==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">You cannot use allowed ips of 0.0.0.0/0 for both peer. This causes a collision. What works is setting of 10.10.0.2/32 and 10.10.0.3/32. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">The allowed ip's feature is for crypto routing. The key is valid for the allowed ip space. So, one single key is valid for the whole space. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Resolving local hostnames accross wg tunnel with dnsmasq==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">First of all you need to enable &quot;Local DNS&quot; and disable &quot;No DNS Rebind&quot; options on DNSMasq section of Services.asp site.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Then, on eop-tunnel.asp site for Peer Tunnel DNS field enter your router/local DNS ip (e.g. 192.168.1.1). Repeat it for every peer.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">As we mentioned before wireguard cannot be bridged. So you need to specify the wireguard interface or local ip of the interface in dnsmasq as additional binding interface / listener (interface=oet1). There is also a nvram var &quot;dnsmasq_addif&quot; which allows you to specify custom additional interfaces (nvram set dnsmasq_addif=oet1). But, the easiest way is to simply add a dhcp interface at networking.asp (bottom of the page). Since the client is not requesting any ip nothing special will happen. Dhcp is present and reachable, but unused.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Persistent Keep Alive==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">This is optional, it's seconds between keep alive messages. Default is 0 (Disabled). Recommended value for NATed devices is 25.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Allowed IPs==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">This is required. Represent IP addresses that this peer is allowed to use inside the tunnel. Usually the peer's tunnel IP addresses and the networks the peer routes through tunnel. Outgoing packets will be sent to the peer whose AllowedIPs contain the destination address (If there are multiple matches, the one with the longest matching prefix is chosen). Incoming packets are only accepted if traffic to their source IP would be sent to the same peer. May be specified multiple times.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Preshared Key== </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">A base64 preshared key generated by wg genpsk. Optional, and may be omitted. This option adds an additional layer of symmetric-key cryptography to be mixed into the already existing public-key cryptography, for post-quantum resistance.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">to check if tunnel is active</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> wg</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> interface: oet1</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> public key: blablaPyAN3eOyINB5JKNu4mHyKwrg3Mblabla=</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> private key: (hidden)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> listening port: 51820</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> peer: BLABLAT3TQJwIE0OYx2qeZWYystRb9BLABLAbla=</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> endpoint: 212.200.181.116:9208</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> allowed ips: 0.0.0.0/0</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> latest handshake: 7 seconds ago</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> transfer: 14.11 KiB received, 39.85 KiB sent</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">to check if you nat-ed your oet1 network</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> iptables -t nat -v -n -L </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> Chain POSTROUTING (policy ACCEPT 75 packets, 5466 bytes)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> pkts bytes target prot opt in out source destination </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> 71 14687 SNAT 0 -- * ppp0 192.168.2.0/24 0.0.0.0/0 to:your_router_public_ip</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> 38 2381 SNAT 0 -- * ppp0 10.0.0.0/24 0.0.0.0/0 to:your_router_public_ip</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Useful console directives==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> ip addr </ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Review your distribution's wiki and forums for more specific details.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> ip route show</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*Go to the eop-tunnel.asp of your router, and grab a screenshot of the qrcode.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*Save it but remember location and name of png file. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*Open the qrcode decoder and add the png file to decode</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*You will be prompted with a decoded txt config file. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">*Use it to populate wireguard client side config in the network manager.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Importing config to Windows==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> ifconfig</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Software:</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">* [https://www.wireguard.com/install/ Windows .msi installer] </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">* A graphical QRCode decoder e.g. [https://www.codetwo.com/freeware/qr-code-desktop-reader/ CodeTwo QR Code Reader]</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">[[Image:Vpn.jpg|400px|Instructions]]</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> traceroute</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">[[Image:Blabla.png|300px|Instructions]]</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Reference==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> ping</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">For more details and Troubleshooting see the parent [[Wireguard]] wiki&lt;br&gt;</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">For the latest updated information and additional scripts see the [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=322206 Wireguard setup guide].</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">=Reference=</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://www.wireguard.com/#conceptual-overview Conceptual Overview]&lt;br&gt;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://git.zx2c4.com/WireGuard/ Git Repository]&lt;br&gt;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://lists.zx2c4.com/mailman/listinfo/wireguard/ WireGuard Mailing Lists]&lt;br&gt;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://svn.dd-wrt.com/log/src/router/wireguard Changeset]&lt;br&gt;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[https://www.dd-wrt.com/phpBB2/viewtopic.php?t=312522 Forum]&lt;br&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td></tr> </table> Fri, 17 Jan 2020 08:37:40 GMT Mile-Lile http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Jeremywh7: Integrated with the main wiki so it points here for the setup, since this one is referenced -everywhere- http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=55343&oldid=prev <p>Integrated with the main wiki so it points here for the setup, since this one is referenced -everywhere-</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 21:01, 16 January 2020</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[VPN]] -&gt; [[Wireguard]] -&gt; '''[[The Easiest Tunnel Ever]]'''&lt;br&gt;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">__TOC__</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td><td> </td><td style="background: #eee; font-size: smaller;">=Introduction=</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">This [[Wireguard]] <del style="color: red; font-weight: bold; text-decoration: none;">tutorial is for beginners, and therefore before proceeding make sure you have working reset button and have backed up you configuration (so you can reset your router and restore configuration if you stuck somewhere). </del></td><td>+</td><td style="background: #cfc; font-size: smaller;">This [[Wireguard]] guide will show you the basics of creating tunnel from <ins style="color: red; font-weight: bold; text-decoration: none;">a client </ins>device to <ins style="color: red; font-weight: bold; text-decoration: none;">DD</ins>-<ins style="color: red; font-weight: bold; text-decoration: none;">WRT </ins>unit in a secure way<ins style="color: red; font-weight: bold; text-decoration: none;">. Before proceeding, verify a working reset button and configuration backup in case of problems</ins>.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">This </del>guide will show you the basics of creating tunnel from <del style="color: red; font-weight: bold; text-decoration: none;">your Android/iOS </del>device to <del style="color: red; font-weight: bold; text-decoration: none;">dd</del>-<del style="color: red; font-weight: bold; text-decoration: none;">wrt </del>unit in a secure way. </td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">[[Image:benchmark.PNG|thumbnail|Why WireGuard?]]</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Image:oet1.PNG|<ins style="color: red; font-weight: bold; text-decoration: none;">600px</ins>|Instructions]]</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Image:oet1.PNG|<del style="color: red; font-weight: bold; text-decoration: none;">thumbnail</del>|Instructions]]</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:QR-Code.PNG|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:QR-Code.PNG|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Android.jpeg|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Android.jpeg|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Enable.jpeg|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:Enable.jpeg|thumbnail|Instructions]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Image:DecodeQRcode.PNG|thumbnail|Instructions]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Image:DecodeQRcode.PNG|thumbnail|Instructions]]</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Image:Vpn.jpg|thumbnail|Instructions]]</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Image:Blabla.png|thumbnail|Instructions]]</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Why WireGuard?==</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://www.wireguard.com/ WireGuard®] is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. </td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. </td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">It intends to be considerably more performant than OpenVPN.</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Why WireGuard + DD-WRT tunnel?==</td><td> </td><td style="background: #eee; font-size: smaller;">==Why WireGuard + DD-WRT tunnel?==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Starting <del style="color: red; font-weight: bold; text-decoration: none;">from </del>February 2019 <del style="color: red; font-weight: bold; text-decoration: none;">and courtesy of BrainSlayer (Sebastian Gottschall, lead dd-wrt developer)</del>, a client config can be imported <del style="color: red; font-weight: bold; text-decoration: none;">to Android/iOS in a very simple way </del>using QR Code<del style="color: red; font-weight: bold; text-decoration: none;">.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">Starting <ins style="color: red; font-weight: bold; text-decoration: none;">since build 38581 in </ins>February 2019, a client config can be imported using QR Code. The advantage of this approach is that there is no need to transfer sensitive information via data channels that can potentially be compromised</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">No more complicated key generation, copy-paste and other headaches</del>. The advantage of this approach is that there is no need to transfer sensitive information via data channels that can potentially be compromised</td><td>+</td><td style="background: #cfc; font-size: smaller;">and there is no need of any other supplementary software besides WireGuard and <ins style="color: red; font-weight: bold; text-decoration: none;">the </ins>DD-WRT GUI.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">and there is no need of any other supplementary software besides <del style="color: red; font-weight: bold; text-decoration: none;">a </del>WireGuard <del style="color: red; font-weight: bold; text-decoration: none;">app (Android/iOS) </del>and DD-WRT GUI.</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==What is a QR Code?==</td><td> </td><td style="background: #eee; font-size: smaller;">==What is a QR Code?==</td></tr> <tr><td colspan="2" align="left"><strong>Line 31:</strong></td> <td colspan="2" align="left"><strong>Line 26:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=Instructions=</td><td> </td><td style="background: #eee; font-size: smaller;">=Instructions=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Creating tunnel==</td><td> </td><td style="background: #eee; font-size: smaller;">==Creating tunnel==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">First, enable the tunnel on the DD-WRT <del style="color: red; font-weight: bold; text-decoration: none;">EOP Tunnel page </del>(<del style="color: red; font-weight: bold; text-decoration: none;">http://your_router_ip/</del>eop-tunnel.asp).</td><td>+</td><td style="background: #cfc; font-size: smaller;">First, enable the tunnel on the DD-WRT <ins style="color: red; font-weight: bold; text-decoration: none;">''Basic'' -&gt; ''Tunnels'' tab </ins>(eop-tunnel.asp). From the ''Protocol Type'' drop-down menu, choose WireGuard. Generate Key and enter IP Address (this will be oet1 interface ip and must be out of your local lan range, on a separate network.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">From the ''Protocol Type'' drop-down menu, choose WireGuard. Generate Key and enter IP Address (this will be oet1 interface ip and must be out of your local lan range, on a separate network.</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*</ins>E.g. if <ins style="color: red; font-weight: bold; text-decoration: none;">the </ins>router LAN IP is 192.168.2.1, for <ins style="color: red; font-weight: bold; text-decoration: none;">the oet1 </ins>IP address <ins style="color: red; font-weight: bold; text-decoration: none;">use </ins>10.10.0.1.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">E.g. if <del style="color: red; font-weight: bold; text-decoration: none;">your </del>router LAN IP is 192.168.2.1, for <del style="color: red; font-weight: bold; text-decoration: none;">an </del>IP address <del style="color: red; font-weight: bold; text-decoration: none;">of oet1 put </del>10.10.0.1.</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td></tr> <tr><td colspan="2" align="left"><strong>Line 39:</strong></td> <td colspan="2" align="left"><strong>Line 33:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">The disadvantage of </del>Wireguard <del style="color: red; font-weight: bold; text-decoration: none;">is that you </del>cannot bridge anything<del style="color: red; font-weight: bold; text-decoration: none;">. You </del>always have <del style="color: red; font-weight: bold; text-decoration: none;">to forward </del>and <del style="color: red; font-weight: bold; text-decoration: none;">do nat</del>. <del style="color: red; font-weight: bold; text-decoration: none;">No other way!</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">Wireguard cannot bridge anything<ins style="color: red; font-weight: bold; text-decoration: none;">, you </ins>always have <ins style="color: red; font-weight: bold; text-decoration: none;">use Forward </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">NAT</ins>. <ins style="color: red; font-weight: bold; text-decoration: none;">Go </ins>to Networking and unbridge <ins style="color: red; font-weight: bold; text-decoration: none;">the </ins>oet1 interface and enable Masquerade / NAT <ins style="color: red; font-weight: bold; text-decoration: none;">to </ins>have internet on other side of <ins style="color: red; font-weight: bold; text-decoration: none;">the </ins>tunnel<ins style="color: red; font-weight: bold; text-decoration: none;">. Click ''Apply''</ins>.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">So, head </del>to Networking<del style="color: red; font-weight: bold; text-decoration: none;">.asp </del>and unbridge oet1 interface and enable Masquerade / NAT<del style="color: red; font-weight: bold; text-decoration: none;">. Apply. This way, you'll </del>have internet on other side of <del style="color: red; font-weight: bold; text-decoration: none;">your </del>tunnel.</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">===Note for Access Point mode===</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>===Note for Access Point mode<ins style="color: red; font-weight: bold; text-decoration: none;">=</ins>===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Add the following firewall rule under Administration/Commands and save as firewall then reboot:</td><td> </td><td style="background: #eee; font-size: smaller;">Add the following firewall rule under Administration/Commands and save as firewall then reboot:</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td></tr> <tr><td colspan="2" align="left"><strong>Line 53:</strong></td> <td colspan="2" align="left"><strong>Line 46:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[https://itunes.apple.com/us/app/wireguard/id1441195209 Apple iOS (iOS 12.0 or later)]</td><td> </td><td style="background: #eee; font-size: smaller;">[https://itunes.apple.com/us/app/wireguard/id1441195209 Apple iOS (iOS 12.0 or later)]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==Importing config to <del style="color: red; font-weight: bold; text-decoration: none;">desktop (ArchLinux)</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">==Importing config to <ins style="color: red; font-weight: bold; text-decoration: none;">Linux</ins>==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">These </ins>packages <ins style="color: red; font-weight: bold; text-decoration: none;">are needed:</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">First of all, we'll need some </del>packages <del style="color: red; font-weight: bold; text-decoration: none;">to be installed.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* networkmanager-wireguard-git (dkms)</td><td> </td><td style="background: #eee; font-size: smaller;">* networkmanager-wireguard-git (dkms)</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* <del style="color: red; font-weight: bold; text-decoration: none;">'''qtqr''' - </del>A <del style="color: red; font-weight: bold; text-decoration: none;">Graphical interface </del>QRCode decoder </td><td>+</td><td style="background: #cfc; font-size: smaller;">* A <ins style="color: red; font-weight: bold; text-decoration: none;">graphical </ins>QRCode decoder <ins style="color: red; font-weight: bold; text-decoration: none;">e</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">g</ins>. '''qtqr''' </td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">* [https://flameshot</del>.<del style="color: red; font-weight: bold; text-decoration: none;">js</del>.<del style="color: red; font-weight: bold; text-decoration: none;">org/#/ flameshot] </del></td><td>+</td><td style="background: #cfc; font-size: smaller;">* <ins style="color: red; font-weight: bold; text-decoration: none;">Screenshot tool e</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">g</ins>. [https://<ins style="color: red; font-weight: bold; text-decoration: none;">flameshot</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">js</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">org</ins>/<ins style="color: red; font-weight: bold; text-decoration: none;">#</ins>/ <ins style="color: red; font-weight: bold; text-decoration: none;">flameshot</ins>]</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">You can use console or Pamac. It's your choice:) Go to the eop-tunnel.asp of you router,</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">and use flameshot to select area of qrcode and grab screenshot.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Save it but remember location and name of png file. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Open </del>'''qtqr''' <del style="color: red; font-weight: bold; text-decoration: none;">and add png file (choose Decode from file).</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">You will be prompted with decoded txt config file. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Use it to populate wireguard client side config in network manager.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Importing config to desktop (Windows)==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">You'll need some additional softwares.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* <del style="color: red; font-weight: bold; text-decoration: none;">[https://www</del>.<del style="color: red; font-weight: bold; text-decoration: none;">wireguard</del>.<del style="color: red; font-weight: bold; text-decoration: none;">com/install/?downloadwindowsprealpha=1 Windows.msi] </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">* </del>[https://<del style="color: red; font-weight: bold; text-decoration: none;">www</del>.<del style="color: red; font-weight: bold; text-decoration: none;">codetwo</del>.<del style="color: red; font-weight: bold; text-decoration: none;">com</del>/<del style="color: red; font-weight: bold; text-decoration: none;">freeware</del>/<del style="color: red; font-weight: bold; text-decoration: none;">qr-code-desktop-reader/ CodeTwo QR Code Reader</del>] </td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">This Windows Pre-alpha is in testing phase see [https://lists.zx2c4.com/pipermail/wireguard/2019-May/004126.html Announce]</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">If you find any bugs write report back to team@wireguard.com</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">=Troubleshooting=</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Dynamic WAN IP on router==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">After importing configs from ddwrt to Android/iOS app you can edit peer section (tap on pencil in upper right corner) - Endpoint.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Enter something like this Endpoint = my.ddns.address.com:51820. This way you will be able to access your router even after reboot and changing IP.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Adding a second peer breaks the first==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">You cannot use allowed ips of 0.0.0.0/0 for both peer. This causes a collision. What works is setting of 10.10.0.2/32 and 10.10.0.3/32. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">The allowed ip's feature is for crypto routing. The key is valid for the allowed ip space. So, one single key is valid for the whole space. </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Resolving local hostnames accross wg tunnel with dnsmasq==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">First of all you need to enable &quot;Local DNS&quot; and disable &quot;No DNS Rebind&quot; options on DNSMasq section of Services.asp site.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Then, on eop-tunnel.asp site for Peer Tunnel DNS field enter your router/local DNS ip (e.g. 192.168.1.1). Repeat it for every peer.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">As we mentioned before wireguard cannot be bridged. So you need to specify the wireguard interface or local ip of the interface in dnsmasq as additional binding interface / listener (interface=oet1). There is also a nvram var &quot;dnsmasq_addif&quot; which allows you to specify custom additional interfaces (nvram set dnsmasq_addif=oet1). But, the easiest way is to simply add a dhcp interface at networking.asp (bottom of the page). Since the client is not requesting any ip nothing special will happen. Dhcp is present and reachable, but unused.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Persistent Keep Alive==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">This is optional, it's seconds between keep alive messages. Default is 0 (Disabled). Recommended value for NATed devices is 25.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Allowed IPs==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">This is required. Represent IP addresses that this peer is allowed to use inside the tunnel. Usually the peer's tunnel IP addresses and the networks the peer routes through tunnel. Outgoing packets will be sent to the peer whose AllowedIPs contain the destination address (If there are multiple matches, the one with the longest matching prefix is chosen). Incoming packets are only accepted if traffic to their source IP would be sent to the same peer. May be specified multiple times.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Preshared Key== </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">A base64 preshared key generated by wg genpsk. Optional, and may be omitted. This option adds an additional layer of symmetric-key cryptography to be mixed into the already existing public-key cryptography, for post-quantum resistance.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">to check if tunnel is active</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> wg</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> interface: oet1</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> public key: blablaPyAN3eOyINB5JKNu4mHyKwrg3Mblabla=</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> private key: (hidden)</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> listening port: 51820</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> peer: BLABLAT3TQJwIE0OYx2qeZWYystRb9BLABLAbla=</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> endpoint: 212.200.181.116:9208</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> allowed ips: 0.0.0.0/0</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> latest handshake: 7 seconds ago</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> transfer: 14.11 KiB received, 39.85 KiB sent</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">to check if you nat-ed your oet1 network</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> iptables -t nat -v -n -L </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> Chain POSTROUTING (policy ACCEPT 75 packets, 5466 bytes)</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> pkts bytes target prot opt in out source destination </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> 71 14687 SNAT 0 -- * ppp0 192.168.2.0/24 0.0.0.0/0 to:your_router_public_ip</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> 38 2381 SNAT 0 -- * ppp0 10.0.0.0/24 0.0.0.0/0 to:your_router_public_ip</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">==Useful console directives==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> ip addr </del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> ip route show</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Review your distribution's wiki and forums for more specific details.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*Go to the eop-tunnel.asp of your router, and grab a screenshot of the qrcode.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*Save it but remember location and name of png file. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*Open the qrcode decoder and add the png file to decode</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*You will be prompted with a decoded txt config file. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">*Use it to populate wireguard client side config in the network manager.</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> ifconfig</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Importing config to Windows==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Software:</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* [https://www.wireguard.com/install/ Windows .msi installer] </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* A graphical QRCode decoder e.g. [https://www.codetwo.com/freeware/qr-code-desktop-reader/ CodeTwo QR Code Reader]</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> traceroute</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">[[Image:Vpn.jpg|400px|Instructions]]</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">[[Image:Blabla.png|300px|Instructions]]</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;"> ping</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==Reference==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">For more details and Troubleshooting see the parent [[Wireguard]] wiki&lt;br&gt;</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">For the latest updated information and additional scripts see the [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=322206 Wireguard setup guide].</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">=Reference=</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://www.wireguard.com/#conceptual-overview Conceptual Overview]&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://git.zx2c4.com/WireGuard/ Git Repository]&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://lists.zx2c4.com/mailman/listinfo/wireguard/ WireGuard Mailing Lists]&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://svn.dd-wrt.com/log/src/router/wireguard Changeset]&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[https://www.dd-wrt.com/phpBB2/viewtopic.php?t=312522 Forum]&lt;br&gt;</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Tunneling]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td></tr> </table> Thu, 16 Jan 2020 21:01:53 GMT Jeremywh7 http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Mile-Lile at 11:16, 18 September 2019 http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54931&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 11:16, 18 September 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 61:</strong></td> <td colspan="2" align="left"><strong>Line 61:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* [https://flameshot.js.org/#/ flameshot] </td><td> </td><td style="background: #eee; font-size: smaller;">* [https://flameshot.js.org/#/ flameshot] </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">You can use console or Pamac. It's your choice:) </td><td>+</td><td style="background: #cfc; font-size: smaller;">You can use console or Pamac. It's your choice:) Go to the eop-tunnel.asp of you router,</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">I prefer Gtk3. </del>Go to the eop-tunnel.asp of you router,</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">and use flameshot to select area of qrcode and grab screenshot.</td><td> </td><td style="background: #eee; font-size: smaller;">and use flameshot to select area of qrcode and grab screenshot.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Save it but remember location and name of png file. </td><td> </td><td style="background: #eee; font-size: smaller;">Save it but remember location and name of png file. </td></tr> <tr><td colspan="2" align="left"><strong>Line 73:</strong></td> <td colspan="2" align="left"><strong>Line 72:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">You'll need some additional softwares.</td><td> </td><td style="background: #eee; font-size: smaller;">You'll need some additional softwares.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* [https://www.wireguard.com/install/?downloadwindowsprealpha=1 Windows <del style="color: red; font-weight: bold; text-decoration: none;">Pre-alpha</del>] </td><td>+</td><td style="background: #cfc; font-size: smaller;">* [https://www.wireguard.com/install/?downloadwindowsprealpha=1 Windows<ins style="color: red; font-weight: bold; text-decoration: none;">.msi</ins>] </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* [https://www.codetwo.com/freeware/qr-code-desktop-reader/ CodeTwo QR Code Reader] </td><td> </td><td style="background: #eee; font-size: smaller;">* [https://www.codetwo.com/freeware/qr-code-desktop-reader/ CodeTwo QR Code Reader] </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Wed, 18 Sep 2019 11:16:03 GMT Mile-Lile http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Ian5142: Rewording of Access Point mode section. http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54855&oldid=prev <p>Rewording of Access Point mode section.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 12:53, 14 August 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 43:</strong></td> <td colspan="2" align="left"><strong>Line 43:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">===Note for Access Point mode===</td><td> </td><td style="background: #eee; font-size: smaller;">===Note for Access Point mode===</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Use </del>the following <del style="color: red; font-weight: bold; text-decoration: none;">instead</del>:</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Add </ins>the following <ins style="color: red; font-weight: bold; text-decoration: none;">firewall rule under Administration/Commands and save as firewall then reboot</ins>:</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Wed, 14 Aug 2019 12:53:00 GMT Ian5142 http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Ian5142: Added note for Access Point mode. http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54854&oldid=prev <p>Added note for Access Point mode.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 12:19, 14 August 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 41:</strong></td> <td colspan="2" align="left"><strong>Line 41:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The disadvantage of Wireguard is that you cannot bridge anything. You always have to forward and do nat. No other way!</td><td> </td><td style="background: #eee; font-size: smaller;">The disadvantage of Wireguard is that you cannot bridge anything. You always have to forward and do nat. No other way!</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">So, head to Networking.asp and unbridge oet1 interface and enable Masquerade / NAT. Apply. This way, you'll have internet on other side of your tunnel.</td><td> </td><td style="background: #eee; font-size: smaller;">So, head to Networking.asp and unbridge oet1 interface and enable Masquerade / NAT. Apply. This way, you'll have internet on other side of your tunnel.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">===Note for Access Point mode===</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Use the following instead:</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&lt;pre&gt;iptables -t nat -I POSTROUTING -o br0 -j SNAT --to $(nvram get lan_ipaddr)&lt;/pre&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Importing config to Android/iOS==</td><td> </td><td style="background: #eee; font-size: smaller;">==Importing config to Android/iOS==</td></tr> </table> Wed, 14 Aug 2019 12:19:10 GMT Ian5142 http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Mile-Lile at 06:52, 23 May 2019 http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54790&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 06:52, 23 May 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 88:</strong></td> <td colspan="2" align="left"><strong>Line 88:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">First of all you need to enable &quot;Local DNS&quot; and disable &quot;No DNS Rebind&quot; options on DNSMasq section of Services.asp site.</td><td> </td><td style="background: #eee; font-size: smaller;">First of all you need to enable &quot;Local DNS&quot; and disable &quot;No DNS Rebind&quot; options on DNSMasq section of Services.asp site.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Then, on eop-tunnel.asp site for Peer Tunnel DNS field enter your router/local DNS ip (e.g. 192.168.1.1). Repeat it for every peer.</td><td> </td><td style="background: #eee; font-size: smaller;">Then, on eop-tunnel.asp site for Peer Tunnel DNS field enter your router/local DNS ip (e.g. 192.168.1.1). Repeat it for every peer.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">As we mentioned before wireguard cannot be bridged. So you need to specify the wireguard interface or local ip of the interface in dnsmasq as additional binding interface / listener (interface=oet1). There is also a nvram var &quot;dnsmasq_addif&quot; which allows you to specify custom additional interfaces. But, the easiest way is to simply add a dhcp interface at networking.asp (bottom of the page). Since the client is not requesting any ip nothing special will happen. Dhcp is present and reachable, but unused.</td><td>+</td><td style="background: #cfc; font-size: smaller;">As we mentioned before wireguard cannot be bridged. So you need to specify the wireguard interface or local ip of the interface in dnsmasq as additional binding interface / listener (interface=oet1). There is also a nvram var &quot;dnsmasq_addif&quot; which allows you to specify custom additional interfaces <ins style="color: red; font-weight: bold; text-decoration: none;">(nvram set dnsmasq_addif=oet1)</ins>. But, the easiest way is to simply add a dhcp interface at networking.asp (bottom of the page). Since the client is not requesting any ip nothing special will happen. Dhcp is present and reachable, but unused.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Persistent Keep Alive==</td><td> </td><td style="background: #eee; font-size: smaller;">==Persistent Keep Alive==</td></tr> </table> Thu, 23 May 2019 06:52:53 GMT Mile-Lile http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Mile-Lile at 06:06, 20 May 2019 http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54788&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 06:06, 20 May 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 36:</strong></td> <td colspan="2" align="left"><strong>Line 36:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td><td> </td><td style="background: #eee; font-size: smaller;">==Adding Peer==</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">For a simple configuration you just need to enter Peer Tunnel IP within oet1 interface ip range (e.g. 10.10.0.2) and Peer Tunnel DNS (8.8.8.8). Peer Tunnel MTU will be calculated automatically (WAN mtu<del style="color: red; font-weight: bold; text-decoration: none;">: 80</del>) but can then be edited. Click Save. Generate QR-Code by pressing QR-Code button.</td><td>+</td><td style="background: #cfc; font-size: smaller;">For a simple configuration you just need to enter Peer Tunnel IP within oet1 interface ip range (e.g. 10.10.0.2) and Peer Tunnel DNS (8.8.8.8). Peer Tunnel MTU will be calculated automatically (WAN mtu<ins style="color: red; font-weight: bold; text-decoration: none;">-40</ins>) but can then be edited. Click Save. Generate QR-Code by pressing QR-Code button.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td><td> </td><td style="background: #eee; font-size: smaller;">==Masquerading tunnel==</td></tr> </table> Mon, 20 May 2019 06:06:23 GMT Mile-Lile http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever Mile-Lile at 11:12, 19 May 2019 http://wiki.dd-wrt.com/wiki/index.php?title=The_Easiest_Tunnel_Ever&diff=54787&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 11:12, 19 May 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 84:</strong></td> <td colspan="2" align="left"><strong>Line 84:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">You cannot use allowed ips of 0.0.0.0/0 for both peer. This causes a collision. What works is setting of 10.10.0.2/32 and 10.10.0.3/32. </td><td> </td><td style="background: #eee; font-size: smaller;">You cannot use allowed ips of 0.0.0.0/0 for both peer. This causes a collision. What works is setting of 10.10.0.2/32 and 10.10.0.3/32. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The allowed ip's feature is for crypto routing. The key is valid for the allowed ip space. So, one single key is valid for the whole space. </td><td> </td><td style="background: #eee; font-size: smaller;">The allowed ip's feature is for crypto routing. The key is valid for the allowed ip space. So, one single key is valid for the whole space. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">==Resolving local hostnames accross wg tunnel with dnsmasq==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">First of all you need to enable &quot;Local DNS&quot; and disable &quot;No DNS Rebind&quot; options on DNSMasq section of Services.asp site.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Then, on eop-tunnel.asp site for Peer Tunnel DNS field enter your router/local DNS ip (e.g. 192.168.1.1). Repeat it for every peer.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">As we mentioned before wireguard cannot be bridged. So you need to specify the wireguard interface or local ip of the interface in dnsmasq as additional binding interface / listener (interface=oet1). There is also a nvram var &quot;dnsmasq_addif&quot; which allows you to specify custom additional interfaces. But, the easiest way is to simply add a dhcp interface at networking.asp (bottom of the page). Since the client is not requesting any ip nothing special will happen. Dhcp is present and reachable, but unused.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">==Persistent Keep Alive==</td><td> </td><td style="background: #eee; font-size: smaller;">==Persistent Keep Alive==</td></tr> </table> Sun, 19 May 2019 11:12:07 GMT Mile-Lile http://wiki.dd-wrt.com/wiki/index.php/Talk:The_Easiest_Tunnel_Ever