次のリビジョン | 前のリビジョン |
linux:openwrt:wireguard [2022/10/03 03:49] – 作成 ともやん | linux:openwrt:wireguard [2022/10/04 06:02] (現在) – [WireGuard] ともやん |
---|
====== WireGuard ====== | ====== WireGuard - OpenWrt ====== |
| 公式ドキュメント: [[https://openwrt.org/docs/guide-user/services/vpn/wireguard/basics|[OpenWrt Wiki] WireGuard basics]]\\ |
| |
===== インストール ===== | ===== インストール ===== |
<WRAP color_term> | <WRAP color_term> |
<WRAP color_command><html><pre> | <WRAP color_command><html><pre> |
<b class=GRN>#</b> <b class=HIY>opkg</b> update && <b class=HIY>opkg</b> install luci-proto-wireguard luci-app-wireguard | <b class=GRN>#</b> <b class=HIY>opkg</b> update && <b class=HIY>opkg</b> install luci-proto-wireguard luci-app-wireguard |
| </pre></html></WRAP> |
| <WRAP color_result_long><html><pre> |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_core |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/Packages.sig |
| Signature check passed. |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/base/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_base |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/base/Packages.sig |
| Signature check passed. |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/luci/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_luci |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/luci/Packages.sig |
| Signature check passed. |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/packages/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_packages |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/packages/Packages.sig |
| Signature check passed. |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/routing/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_routing |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/routing/Packages.sig |
| Signature check passed. |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/telephony/Packages.gz |
| Updated list of available packages in /var/opkg-lists/openwrt_telephony |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/telephony/Packages.sig |
| Signature check passed. |
| Installing luci-proto-wireguard (git-22.213.40001-18e6040) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/luci/luci-proto-wireguard_git-22.213.40001-18e6040_all.ipk |
| Installing kmod-crypto-lib-chacha20 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-crypto-lib-chacha20_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-crypto-lib-poly1305 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-crypto-lib-poly1305_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-crypto-lib-chacha20poly1305 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-crypto-lib-chacha20poly1305_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-crypto-kpp (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-crypto-kpp_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-crypto-lib-curve25519 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-crypto-lib-curve25519_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-udptunnel4 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-udptunnel4_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-udptunnel6 (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-udptunnel6_5.10.134-1_arm_cortex-a9.ipk |
| Installing kmod-wireguard (5.10.134-1) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/targets/bcm53xx/generic/packages/kmod-wireguard_5.10.134-1_arm_cortex-a9.ipk |
| Installing wireguard-tools (1.0.20210424-3) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/base/wireguard-tools_1.0.20210424-3_arm_cortex-a9.ipk |
| Installing libuci-lua (2021-10-22-f84f49f0-6) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/base/libuci-lua_2021-10-22-f84f49f0-6_arm_cortex-a9.ipk |
| Installing luci-app-wireguard (git-21.322.66896-8ae208d) to root... |
| Downloading https://downloads.openwrt.org/releases/22.03.0-rc6/packages/arm_cortex-a9/luci/luci-app-wireguard_git-21.322.66896-8ae208d_all.ipk |
| Configuring kmod-crypto-lib-chacha20. |
| Configuring kmod-crypto-lib-poly1305. |
| Configuring kmod-crypto-lib-chacha20poly1305. |
| Configuring kmod-crypto-kpp. |
| Configuring kmod-crypto-lib-curve25519. |
| Configuring kmod-udptunnel4. |
| Configuring kmod-udptunnel6. |
| Configuring kmod-wireguard. |
| Configuring wireguard-tools. |
| Configuring libuci-lua. |
| Configuring luci-proto-wireguard. |
| Configuring luci-app-wireguard. |
| </pre></html></WRAP> |
| </WRAP> |
| |
| ===== キーを生成 ===== |
| <WRAP color_term> |
| <WRAP color_command><html><pre> |
| <b class=GRN>#</b> <b class=HIY>wg</b> genkey | <b class=HIY>tee</b> wg.key | <b class=HIY>wg</b> pubkey > wg.pub |
| <b class=GRN>#</b> <b class=HIY>ll</b> |
</pre></html></WRAP> | </pre></html></WRAP> |
<WRAP color_result><html><pre> | <WRAP color_result><html><pre> |
| drwxr-xr-x 1 root root 288 Oct 3 04:03 <b class=HIB>.</b>/ |
| drwxr-xr-x 1 root root 480 Sep 27 05:54 <b class=HIB>..</b>/ |
| -rw-r--r-- 1 root root 45 Oct 3 04:03 wg.key |
| -rw-r--r-- 1 root root 45 Oct 3 04:03 wg.pub |
</pre></html></WRAP> | </pre></html></WRAP> |
</WRAP> | </WRAP> |
| |
| ===== サービス再起動 ===== |
| **LuCI** → **System** → **Startup** → **Initscripts** に移動し、**network** → **[Restart]** をクリックする🤔\\ |
| |
| ===== インターフェースの設定 ===== |
| 新しい WireGuard インターフェイスを作成するには、**LuCI** → **Network** → **Interfaces** に移動し、**[Add new interface…]** をクリック **Protocol** ドロップダウン メニューから **WireGuard VPN** を選択する🤤\\ |
| |