OpenWRT - Configure Wireguard Client
HTML-код
- Опубликовано: 5 авг 2024
- In this video, we are going to setup WireGuard client with OpenWRT in LuCI.
WireGuard is a fast, modern, secure VPN tunnel, you can find out more at www.wireguard.com
In order to configure WireGuard client with OpenWRT, we have to install the below packages:
wireguard
luci-app-wireguard
Video timestamp:
00:00 - WireGuard brief introduction
01:03 - Package installation - wireguard and luci-app-wireguard
03:30 - Creating new interface for the WireGuard VPN and firewall zone assignment
06:44 - Test, troubleshooting and final words
OpenWRT Wireguard user guide: openwrt.org/docs/guide-user/s...
Check out other OpenWRT tutorials on my channel.
If there is anything not clear or there is any question, feel free to leave it in the comment section and we can discuss.
As always, please like, share and subscribe to the channel to support me. Thank you! 
Наука
![[How To] Set up WireGuard VPN on OPNsense (& Client Config Examples)](/img/1.gif)
Thank you very much!!! It's a very good and simple guide to setup OpenWRT as a Wireguard client. I have changed something (assigned the wg interface to LAN firewall zone, as I trust the remote network I'm connecting to), and needed further configuration in remote LAN to enable some special accesses. Great work!
Thannk you so much for this video!! Spent all afternoon reading thru forums on how to set this up and could not get it to work. Your video is precise and to the point. Well Done!!
You're welcome! Glad it helped.
Thank you so much for your video! Been searching for how to setup VPN Client side but no luck. Finally got this video and successfully setup my router. Appreciated your work! Great videos tutorial!
谢谢你，虽然听不懂你说的话，但看你操作已经明白了，谢谢你！
谢谢你，我也会一点中文。有时间我会做 中文的字幕。
Video hướng dẫn về Openwrt của bạn rất hay. Tôi luôn chờ xem
Perfect tutorial! Thank you very much for that!
Glad it was helpful!
Thank you, your guide worked.
great tutorial mate, waiting for the next video
Thank you! More to come!
pakiu mate, pakiu. u a ebeliwe
tq and terbaikkkk boh...
Tqvm for the video guide. Already use the wireguard after watching this. It is very lite and fast! . Before this I'm using ovpn in router. Different result when using wireguard. I really love wireguard!
Great to hear! I has been using OpenVPN for a long time before I switch to Wireguard. The performance is way more better then OpenVPN and it requires less processing power then OpenVPN does.
Thank you good sir!
Perfect. Thank you
Glad it helped!
Thanks so much ,this is my request
Hope you like it!
amazing!
Just want to say thank you.
Glad you like the video. There are other OpenWRT tutorials, including Wireguard server, OpenVPN site to site on the channel page. Don't forget to check it out!
Hi,
When I am at 4:07, my panel has Private and Public key to input. Any ideas?
Absolutely brilliant video! Thank you !
I did do the setup with my GL-MT1300 and it works great.
How do I make it persistent that it automatically connects every time when I reboot the router?
Hi, the Wireguard interface should auto start with the system by default, unless you uncheck the "bring up on boot".
hôm nào nhờ cậu làm cái hướng dẫn OpenWRT chạy IPsec IKEv2 Dial-out với con Draytek làm Dial-in ah
great tutorial very simple.
but how do I route some some of the apps without the wireguard?
for example I would like all of my traffic go through wireguard but steam client and videogames to connect directly without vpn.
VPN routing policies
ruclips.net/video/YEHDf8-nZyA/видео.html
following the instructions i got the ip addres to chagne but the traffic still doesn't look like it's going trhough the wireguard server since the blocked websites remain blocked. any ideas?
Hi, I dont see wirguard on the list, how can I do?
find what to get right interface, I can not find, can help me
I would pay money for your Patreon if you had one for this video
hey how's it going?? your video was of great help, I would like you to help me with a problem that I cannot solve, I am using a GL-MT250 router as a WIREGUARD server, and as a WIREGUARD CLIENT I am using a TPLINK router with OPENWRT firmware, I managed to connect perfectly with the vpn but from the client side I can access the LAN from the server side, but from the server I can not access the LAN from the client side, how do I solve this problem?? thanks
how do you setup wireguard client so only couple of devices on your network use VPN based route to internet and all other devices access internet without it?
Yes, need an example of routing only a vlan through the VPN
Hi Van Tech Corner,
Is this setup ideal for if I want to access my RDP from outside network via this WG Client setup on OpenWRT?
Also the Wineguard for Windows 10 is that a server or client app?
Thanks in advance.
Hi, this is wireguard client, in which your device/router is going to connected to a Wireguard VPN server. If you want to remote access your PC and manage other devices at home while outside, you will need to setup a Wireguard VPN server on your router (there is a video about this). And then, use your phone or laptop as a Wireguard client to connect to the server. At this time, you will be able to reach your LAN.
Hi, I'm wondering where did u get the private key from on 4:09?
can you provide a video how to use a 2G/5G wifi router running openwrt with wireguard. I want to only have the 5G Wi-fi to use the VPN, all the time... the router lan and 2G will use the WAN. I've been struggling to get anything to work.
Can i set it up to include a kill switch so that no traffic goes through if Wireguard interface goes down?
Hey, sorry for the late response. You can do this, here is the guide openwrt.org/docs/guide-user/services/vpn/wireguard/extras#kill_switch
Chào
Van Tech Corner, hy vọng ADM làm một bài về cách phân luồng IP qua Wireguard ( chỉ đi qua Wireguard khi truy cập các web ngoài VN, còn trong VN vẫn sử dụng ISP VN ạ). Cám ơn Van Tech Corner.
Trong Wireguard trên LuCI có phần "Allowed IP", bạn chỉ việc nhập địa chỉ IP hoặc subnet muốn đi qua Wireguard (thay vì để 0.0.0.0/0) và tick chọn "Route Allowed IP" là được. Nếu muốn cấu hình cao hơn, bạn có thể tìm hiểu VPN Policy Routing hoặc mwan3.
Hi Van Tech Corner, firstly thank you making for the video, I was wondering if you could make a variation of this install.
I have a PI (3B) and I've installed the default OpenWRT image, the variation would be using the PI's wifi as the Lan (Access Point) and the Ethernet as the WAN, with a wireguard client connection routing from Wifi (connected users) to WAN. I've not been able to get my head round figuring out how to make the routing work on such a setup, compared to your version which is using a dual ethernet device. Many thanks (in the meantime I continue to crawl the endless net for a solution)
Hi, do you have a USB UART cable? I see it is very easy to get the job done. After the fresh install, if it is snapshot version then you can check out my video about "Install Luci snapshot firmware" to do that. With Luci installed, connect to it via the LAN port and setup your Wifi (in LAN) as well. Finally connect to Wifi and change the eth0 from LAN interface to WAN. You can find sort of tutorials in this playlist ruclips.net/p/PL58__w3t_eTbcBQ9oJ8jXCxPtBiac59vC
@@VanTechCorner Really great video, appreciate all your tutorials. I am stuck at a similar position. I am routing internet via the Pi4's ethernet port via wifi access point and trying to route the traffic via Wireguard VPN. Basically, having difficulty changing eth0 from LAN interface to WAN. Every time I try, my raspberry pi reverts back to previous settings. Would really need your guidance on this.
Where to change dns
Hi Van, I am a bit confused. I am looking for a setup, where my wireguard will act as a server, and then other people can connect with my openwrt device wireguard server. How to do that? anyidea?
Hi, there is a video about wireguard VPN server, you can combine this video with "openwrt ddns (dynamic domain)" and it should get the thing done.
Thank you, I imitated this video and set it up, but it didn't work in my environment. (Packet communication volume 0) GL-MT300N-v2 The server side is a machine with a direct global IP address. I don't want to do this because if I allow 0.0.0.0/0 on the wireguard server side, net services such as RDP will hang. By the way, the client side is beyond the isp modem and router. It is GL-MT300N-v2. I want to solve it somehow. Please give me some advice!
Hi, sorry for the late response. Did you manage to get it fix or the problem is still on going?
Ipv6 warp wireguard not working :/ only ipv4😢
thank you for the informative video sir! please excuse my knowledge but may I please know the benefits of having a vpn in your router?
Hi Sir. I am wondering what is wrong with my Wireguard config. Config file can run on phone but Cannot run on MI4A openwrt router and PC wireguard apps too. Appreciate if you can help me on this problem.
Hi, can you provide more information. What is the error message on the wireguard interface? is there any status on the Wireguard status page on LuCI?
guest lan lost connection with wireguard, can you help me with that ? :)
is it possible to have rules set so that only some dhcp clients get their traffic passed through the wireguard interface and everyone else stays on the standard wan?
Yes, you can configure it in the "Allowed IP" and fill in the IP/subnet which should go out from the wireguard interface, instead of 0.0.0.0/0, like what I did at 06:03
@@VanTechCorner thank you very much for your reply, im gonna test it now in a 3 VMs ive setup to see if i can get it to work.
EDIT: So I've just tested it, and turns out that method does not work. It seems that "Allowed IPs" is actually Destination IPs that the wg interface should accept, not source IPs (stackoverflow.com/questions/65444747/what-is-the-difference-between-endpoint-and-allowedips-fields-in-wireguard-confi) I did however find a package on opkg called "vpn-policy-routing" which does exactly what I need. Hopefully this comment helps anyone else who might be trying to do the same thing.
Is this can be configured on any router as long as it is running openwrt?
Yes, any OpenWRT as long as it is running OpenWRT.
Can you create a video with multiple peers please, thank you :)
And for the endpoint, you say something like this will be your WR server, what is that, thank you :)
Maybe in the feature. Basically you just need to create a new interface, fill in the peer info and that is. For WG server, I have another tutorial on how to setup a WG server and you can check out that video for further information.
can u make a tutorial to install and configure v2ray in luci openwrt?
Hi, there is a detail tutorial here, you can try and update if there is any problem github.com/kuoruan/openwrt-v2ray
Thank you for the tutorial...it was easy and straight forward.
Just want to asked, if you could do wireguard with mwan3 tutorial.
Very happy if you could help with making the video.
Thank you.
Hi, thanks for your comment. I have yet to try mwan3 with wireguard/openvpn. However, I do have a tutorial for mwan3 load balancing & failover mode, you can check this video out and give a try.
can you make the wireguard only connect to a lan port or does it apply to the whole router?
It will work according to your configuration. If you want only a specific LAN port to be routed via wireguard, you can install mwan3. Or else, you can route a specific IP address through Wireguard by enter the IP in "Allowed IP".
@@VanTechCorner What happens to the allowed ip's internet access if the VPN connection drops? does it go through wan or will it have no internet.
@@UzairFarooqui I'm guessing no Internet since the interface will be correct, the issue is your VPN server
You can make video about Fast roaming on Openwrt.
Hi, I will take a look on this. Thanks for the feedback!
how did you get configuration files? like public and private key
You should get it from the VPN provider or you it should be generated by you when creating the Wireguard server.
@@VanTechCorner thnx, how can i generate one ?
Please see my tutorial on how to setup wireguard server, you will find the instruction there.
Con instalar luci-app-wireguard ya es suficiente, ya que instala todas las dependencias.
The core package is wireguard and it is not included in luci-app-wireguard's dependencies. You can check out the dependencies here openwrt.org/packages/pkgdata/luci-app-wireguard.
@@VanTechCorner The wireguard package is a "meta-package" that actually tells the system to install the dependencies for this service. The packages that are actually the service itself are kmod-wireguard and wireguard-tools, which do not install the LuCI interface. To be able to use it in LuCI, by installing luci-app-wireguard and even installing the translation only in your language, for example "luci-i18n-wireguard-en" you already install everything else to be able to use it. Try it on a fresh installation.
Can i instal tp link mr100 router
Hi, only MR6400 is supported by OpenWRT. If you have a MR6400 hardware ver 1, you can try with ruclips.net/video/ZDSvF9eSOwI/видео.html&ab_channel=VanTechCorner