This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
vpn-wireguard [2024/09/26 00:45] – [Introduction] -Condense hogwild | vpn-wireguard [2024/10/19 18:44] (current) – [Current development status] -Formatting hogwild | ||
---|---|---|---|
Line 3: | Line 3: | ||
===== Introduction ===== | ===== Introduction ===== | ||
- | Wireguard can be configured/ | + | Wireguard can be configured/ |
- | To configure Wireguard | + | \\ |
+ | |||
+ | To configure Wireguard | ||
Regardless of the interface used, you are advised to " | Regardless of the interface used, you are advised to " | ||
Line 13: | Line 15: | ||
The Wireguard web interface menu is a work in progress. It is working/ | The Wireguard web interface menu is a work in progress. It is working/ | ||
+ | |||
+ | \\ | ||
* External VPN provider connectivity | * External VPN provider connectivity | ||
Line 21: | Line 25: | ||
\\ | \\ | ||
- | For this reason, it is best to focus on on site-to-site configurations (as opposed to VPN service providers) | + | For now, only site-to-site configurations (as opposed to VPN service providers) |
+ | |||
+ | [[https:// | ||
+ | |||
+ | \\ | ||
===== Type of VPN ===== | ===== Type of VPN ===== | ||
- | {{: | + | {{: |
This setting affects the creation of peer configurations. | This setting affects the creation of peer configurations. | ||
+ | |||
+ | \\ | ||
* Hub and Spoke: Any peers can only communicate via the Hub. | * Hub and Spoke: Any peers can only communicate via the Hub. | ||
- | * Full Mesh (defined Endpoint only): FreshTomato will try to create a full mesh among peers with EndPoint defined. | + | * Full Mesh (defined Endpoint only): FreshTomato will try to create |
- | * Full Mesh: FreshTomato will try to establish a full mesh between all peers. | + | * Full Mesh: FreshTomato will try to establish a full mesh \\ between all peers. |
- | * External VPN Provider - This option is greyed out, as the function | + | * External VPN Provider - This option is greyed out, as it is still \\ a work in progress. |
- | ===== Troubleshooting ===== | + | ===== Wireguard Notes and Troubleshooting ===== |
- | When trying to configure your VPN, please remember these troubleshooting tips: | + | Please remember these troubleshooting tips when trying to configure your VPN: |
- | ***wg show** (via the command line) output will help you understand the relationship between peers. | + | \\ |
- | ***route** (via the command line) can help you to verify routing decisions while the VPN is connected. | + | |
- | ***traceroute** is a must when verifying end-to-end connectivity. A good approach is to test the following in order: | + | |
- | *Local LAN IP | + | |
- | *Local VPN IP | + | |
- | *Remote VPN IP | + | |
- | *Remote LAN IP | + | |
- | \\ | + | * **wg show** (via the command line) output will help you \\ understand the relationship between peers. |
- | The point of failure will provide critical insight into whatever issue you are facing. | + | * **route** (via the command line) can help you to verify |
+ | * **traceroute** is a must when verifying end-to-end connectivity. \\ A good approach is to test the following in order: | ||
+ | * Local LAN IP | ||
+ | * Local VPN IP | ||
+ | * Remote VPN IP | ||
+ | * Remote LAN IP | ||
+ | |||
+ | | ||
+ | |||
+ | \\ | ||
+ | |||
+ | \\ | ||