Help with WireGuard please

[lleachii]

This is actually simple and Wireguard makes things quite easy.

• You merely have to stand up the tunnels.
• You have to open the UDP ports that you selected as the listening port (at least one device must have the UDP port status and opened on the firewall and port forward on the "Gateway," the other can use keepalive)
• You now need to number your tunnels, the scheme you listed above appears OK
• Make static routes to the networks on each router

[Solved] Wireguard as a VPN "server"

I literally set this up yesterday to see how easy it could be: IPs are managed by the kernels on either side. Therefore, you must use the correct CIDR prefix on the interfaces on both ends. (e.g. for a 2-peer configuration, you must use at least a /31 or /30 at the router-side of your traffic, the "client-end" can use the other available /32 in that subnet). I found a need to setup a different zone. The rules are different between networks, etc.; but this is solely your choice, considering th…

@takimata

Wireguard definitely is not something that can be configured with just a few clicks (yet).

But it does setup well via LuCI GUI!