WireGuard / wireguard-vyatta-ubnt

WireGuard for Ubiquiti Devices
https://www.wireguard.com/
GNU General Public License v3.0
1.46k stars 70 forks source link

Help Configuring w/ Mullvad #40

Open C4RP3N0CT3M opened 4 years ago

C4RP3N0CT3M commented 4 years ago

It's possible I just don't understand what Wireguard is supposed to do when install on a router (Edgerouter PoE in this case), but I could really use some help setting up Wireguard on my router to use as a VPN utilizing Mullvad. I've been using this guide along side this documentation on the Wireguard for EdgeOS Github to set up Mullvad on my router, but I haven't been able to put all the pieces together. For example, there seems to be nowhere where I can place "Public Key – use the key that corresponds with the Mullvad WireGuard server of your choosing" on my Wireguard interface in EdgeOS. I also don't really understand the "Public/private key pair" concept, i.e. do I need to generate one pair for the interface on the router, and one pair for each PC that's connected to the router? I'm just lost. I've attached some pictures of where I'm at. If someone could just point me in the right direction, or translate the Mullvad guide into EdgeOS from OpenWRT, I'd really appreciate it. 2020-07-05 16_47_54-EdgeOS - ubnt - Brave

FossoresLP commented 4 years ago

Hi @C4RP3N0CT3M, since this is more of an issue with understanding WireGuard in general and the setup, you will likely get more help elsewhere. You could try the Ubiquiti Forums thread for WireGuard or maybe read a little more on how WireGuard actually works.

The public key of the server you would like to connect to needs to be added as a peer. Just like you already did with some public key as seen in your screenshot. You need to generate a private key for every peer. The corresponding public keys have to be added to all peers that device should connect to.

Amoeba00 commented 4 years ago

I also recommend not trying to configure wireguard through the GUI as it's an add-in package and not fully native to the EdgeRouter. You'll have more success with setting it up using the CLI (but the UI Wireguard forums are a great place to start).