Wireguard на роутере tp link

User’s Application Scenario

WireGuard VPN is a modern VPN technology that offers high performance and easy configuration. Compared to OpenVPN, VPN performance has been greatly improved. It is very suitable for remote access application scenarios. This article describes how to establish a WireGuard VPN connection between ER605 v2 as well as a Windows PC.

Configuration

Step 1. Configure WireGuard VPN on the router.

1. Go to VPN —>Wireguard—> Wireguard, click Add and fill in the following parameters:

• Name: test
• MTU: 1420 (Default is 1420, no need to modify)
• Listen Port: 51820 (The default port is 51820, which can be modified)
• The public key and the private key will automatically generate a string of random numbers, which can be modified without modification.
• Local IP Address: 192.168.0.2 (This is the IP address of the WireGuard VPN interface, it is recommended not to have the same LAN IP as the router)

2. After the creation, click Export in the figure below to export the public key information from the router and send it to the Windows PC.

Step 2. Configure WireGuard VPN on the Windows PC.

1. Download WireGuard VPN software on the PC, please refer to Installation — WireGuard.

2. Open the WireGuard VPN software and choose Add empty tunnel.

3. Record the public key information and fill in the following parameters:

[Interface]

Address = 10.0.0.1/24 (The interface IP address for the WireGuard VPN, it can fill in what you like)

DNS = 8.8.8.8 (Note that if this parameter is not filled in, the PC will not be able to access the Internet)

[Peer]

PublicKey = Fill in the public key information exported on the Omada Router

AllowedIPs = 0.0.0.0/0

This parameter has two functions: When sending packets, the list of allowed IPs behaves as a sort of routing table, and when receiving packets, the list of allowed IPs behaves as a sort of access control list. 0.0.0.0/0 means that all data sent by the PC goes to the VPN, reaches the peer and is then forwarded by the Omada router.

Endpoint = 192.168.1.110:51820 (Omada Router’s WAN IP address and corresponding port)

4. Save the above configuration as shown below.

Step 3. Configure peer information on the Omada Router.

Go to VPN —>Wireguard—> Peers, click Add, and fill in the following parameters:

• Interface: test (Choose the WireGurad VPN Interface created just now)
• Public Key: Fill in the public key information exported from the Windows PC
• Endpoint and Endpoint Port is the information that needs to be filled in when the Omada Router actively connects to other WireGurad Server, which is not required in this scenario.
• Allowed Address: 10.0.0.1/24 (The same as the WireGuard VPN interface IP configured on the Windows PC)

Step 4. Connect to the Omada Router using WireGuard VPN.

Click Activate of the WireGuard VPN on the Windows PC to connect to the Omada Router.

Verification process

(1) For the Windows PC:

The Status will change to Active proves that a VPN connection has been successfully established

The PC can access the Omada Router’s LAN side.

(2) For Omada Router:

The WireGuard VPN configuration interface displays information about the amount of data transmitted over the VPN and the connection time.

Get to know more details of each function and configuration please go to Download Center to download the manual of your product.

Configuring a VPN on Ubuntu allows you to access and secure your internet connection with increased privacy and security. In this step-by-step guide, we will explain how to configure Wireguard VPN on Ubuntu behind a TP-LINK router/firewall.

Prerequisites

Before we start the configuration process, ensure that you have the following prerequisites:

• A TP-LINK router/firewall device
• A Ubuntu machine
• Root access to your Ubuntu machine
• A Wireguard config file

Step 1: Install Wireguard on Ubuntu

The first step is to install Wireguard on your Ubuntu machine. You can do this using the following command:

sudo apt-get update 
sudo apt-get install wireguard 

Step 2: Generate Wireguard Keys

The next step is to generate Wireguard keys. You can do this using the following commands:

$ cd /etc/wireguard 
$ umask 077 
$ wg genkey | tee privatekey | wg pubkey > publickey 

This generates the private and public keys in the /etc/wireguard directory.

Step 3: Configure Firewall and Router

To configure the firewall and router, you need to open the UDP port 50505. This will allow your Ubuntu machine to connect to your network. To do this, log in to your TP-LINK router/firewall and navigate to the firewall settings. Add a new rule allowing traffic on port 50505 and save the changes.

Step 4: Configure Wireguard

The next step is to configure Wireguard. You can configure Wireguard using the following commands:

$ cd /etc/wireguard 
$ touch wg0.conf 

Next, open the wg0.conf file using a text editor and add the following configuration:

[Interface] 
PrivateKey = <private_key> 
Address = 10.0.0.1/24 
ListenPort = 50505 

[Peer] 
PublicKey = <your_peer_public_key> 
AllowedIPs = 10.0.0.2/32 

Ensure that you replace <private_key> with your private key and <your_peer_public_key> with your peer public key.

Step 5: Start Wireguard

The final step is to start the Wireguard service using the following command:

sudo systemctl start wg-quick@wg0 

Your Wireguard VPN is now configured on your Ubuntu machine and ready for use.

Conclusion

In this step-by-step guide, we have explained how to configure Wireguard VPN on Ubuntu behind a TP-LINK router/firewall. By following these steps, you can access the internet with increased privacy and security.