This commit is contained in:
DoTheEvo 2022-01-15 17:59:14 +01:00
parent 6b66bd63d0
commit 1d041652f1

View File

@ -116,14 +116,31 @@ This configuration when run creates a new `wg0` network interface on the machine
Two peers can not have the same IP.<br>
In this case we want to define only single IP of the client as being accessible, allowed through.
### ipv4 packet forwarding
Without this you will be be able to connect,
but your access will be only to the wireguard host.
To have access to the entire network you need to enable packet forwarding.
You can check current value `cat /proc/sys/net/ipv4/ip_forward`
To permanently enable it create a file
`/etc/sysctl.d/99-sysctl.conf`
```bash
net.ipv4.ip_forward=1
```
### NAT forwarding on the router
Forward port 51820 to the machine running the wireguard server.
### Start and enable the service
`sudo systemctl enable --now wg-quick@wg0`
### Port forwarding
Forward port 51820 to the machine running the wireguard server.
# Configuration on clients
`TESTER-1.conf`