[solved] Wireguard Firewall config

Installing and Using OpenWrt Network and Wireless Configuration
5

ok i read the wiregard docs again.

this is my config for laptop and mobilephone. its works now.

/etc/config/network

config interface 'vpn'
        option proto 'wireguard'
        option private_key 'xxx'
        option listen_port '51820'
        option delegate '0'
        list addresses '10.0.5.1/24'

config wireguard_vpn 'wireguard_laptop'
        option public_key 'xxx'
        option preshared_key 'xxx'
        list allowed_ips '10.0.5.2/32'
        option description 'laptop'
        option route_allowed_ips '1'
        option persistent_keepalive '25'

config wireguard_vpn 'wireguard_phone'
        option public_key 'xxx'
        option preshared_key 'xxx'
        list allowed_ips '10.0.5.3/32'
        option description 'phone'
        option route_allowed_ips '1'
        option persistent_keepalive '25'

/etc/config/firewall


config rule 'wg'
        option name 'Allow-WireGuard'
        option src 'wan'
        option dest_port '51820'
        option proto 'udp'
        option target 'ACCEPT'

config zone
        option name 'wireguard'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option network 'vpn'

config forwarding
        option src 'wireguard'
        option dest 'lan'

config forwarding
        option src 'wireguard'
        option dest 'wan'

thank you

1 Like