adf6d8a1d2e8f314e0efae5530b431e4cfe89378
howto/vyos.md
| ... | ... | @@ -18,25 +18,28 @@ _1.3-rolling-202004300117 is a known good release to work with Wireguard and DN4 |
| 18 | 18 | `generate wireguard default-keypair` |
| 19 | 19 | `show wireguard keypairs pubkey default` |
| 20 | 20 | _Grab your public key and save it for later. This will be shared with peers._ |
| 21 | -###Configure Peer Tunnel |
|
| 22 | -_They should have provided their endpoint public IP, port, DN42 address, and public wireguard key._ |
|
| 21 | +###Configure Peer Tunnel |
|
| 22 | +Your peer should provide their endpoint public IP, port, single DN42 address, and Wireguard public key. |
|
| 23 | + |
|
| 23 | 24 | `set interfaces wireguard wg01 address '172.x.x.x/32'` |
| 24 | 25 | _this is a single address within your DN42 registered address space_ |
| 25 | 26 | `set interfaces wireguard wg01 peer OtherGuy1 allowed-ips '0.0.0.0/0''` |
| 26 | 27 | _it's just easier to filter traffic with the firewall_ |
| 27 | 28 | `set interfaces wireguard wg01 peer OtherGuy1 address 'x.x.x.x'` |
| 28 | 29 | _this is the public IP of your peers endpoint_ |
| 29 | -`set interfaces wireguard wg01 OtherGuy1 port '12345' |
|
| 30 | +`set interfaces wireguard wg01 OtherGuy1 port '12345'` |
|
| 30 | 31 | _the configured port on your peers endpoint_ |
| 31 | 32 | `set interfaces wireguard wg01 peer OtherGuy1 pubkey 'XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI='` |
| 32 | 33 | _your peers public wireguard key_ |
| 33 | 34 | `set interfaces wireguard wg01 port '12345'` |
| 34 | 35 | _the port your wireguard endpoint will "listen" on_ |
| 35 | -###Set Static Route |
|
| 36 | -_In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all._ |
|
| 36 | +###Set Static Route |
|
| 37 | +In case you are wondering how you are going to route packets anywhere with a /32, the next command explains it all. |
|
| 38 | + |
|
| 37 | 39 | `set protocols static interface-route 172.x.x.x/32 next-hop-interface wg01` |
| 38 | 40 | _this is a single provided address by your peer that is assigned to them in the registry_ |
| 39 | - |
|
| 41 | + |
|
| 42 | +While a normal world configuration may allow multiple peers on one Wireguard interface, this configuration will not work correctly if multiple peers are defined on the same interface. |
|
| 40 | 43 | |
| 41 | 44 | ####Coming Soon |
| 42 | 45 |