First Commit
This commit is contained in:
commit
bd67283438
142 changed files with 5061 additions and 0 deletions
111
wireguard/wireguard-evoq.sh.NOTES
Normal file
111
wireguard/wireguard-evoq.sh.NOTES
Normal file
|
|
@ -0,0 +1,111 @@
|
|||
inférence
|
||||
|
||||
WG-Users
|
||||
========
|
||||
Public Key: cat4H07058+1VLQu2ns9tWGImfMx0hrHZI6F9WTsFR8=
|
||||
|
||||
Win10 10.100.100.100 Elair-Riverra661
|
||||
|
||||
|
||||
|
||||
|
||||
/interface/wireguard/peers/add allowed-address=10.100.99.101 interface=WG-Users persistent-keepalive=10 public-key=
|
||||
|
||||
|
||||
|
||||
https://github.com/IgorKha/wireguard-mikrotik
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
[i] Config available in /home/boig01/temp/wireguard/wg01/client/Laptop/wg01-client-Laptop.conf
|
||||
[i] QR is also available in /home/boig01/temp/wireguard/wg01/client/Laptop/wg01-client-Laptop.png
|
||||
[i] MikroTik peer config available in /home/boig01/temp/wireguard/wg01/client/Laptop/mikrotik-wg01-client-Laptop.rsc
|
||||
[i] MikroTik interface config available in /home/boig01/temp/wireguard/wg01/mikrotik/wg01.rsc
|
||||
[i] If you want to add more clients, you simply need to run this script another time!
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
mikrotik/wg01.rsc
|
||||
=================
|
||||
# WireGuard interface configure
|
||||
/interface wireguard
|
||||
add listen-port=13231 mtu=1420 name=wg01 private-key=\
|
||||
"mHAePE+zX9qDM9VyN0PZ5wolk3RY7c+dZgAsOdvw/HA="
|
||||
/ip firewall filter
|
||||
add action=accept chain=input comment=wg-wg01 dst-port=13231 protocol=udp
|
||||
/ip firewall filter move [/ip firewall filter find comment=wg-wg01] 1
|
||||
/ip address
|
||||
add address=10.100.99.1/24 comment=wg-wg01 interface=wg01
|
||||
|
||||
# WireGuard client peer configure
|
||||
/interface wireguard peers
|
||||
add allowed-address=10.100.99.2/32 comment=\
|
||||
wg01-client-Laptop interface=wg01 \
|
||||
preshared-key="6V1dSygIB9cfq//EKLZmVl4qLVmKgHAqqeGQt84uvqY=" public-key=\
|
||||
"gwi0ou0D2fWFcB1WNcarGHUu31DG1InGu39EryMnSGc="
|
||||
|
||||
|
||||
client/Laptop/wg01-client-Laptop.conf
|
||||
=====================================
|
||||
[Interface]
|
||||
PrivateKey = YJ+4MBqJj/uoJFatfkh5yDghJUDmigKhxiT50vMSP0A=
|
||||
Address = 10.100.99.2/32,fd42:55:24::2/128
|
||||
DNS = 1.1.1.1,8.8.8.8
|
||||
|
||||
[Peer]
|
||||
PublicKey = Oe03xZcw+Fj0s2WwLTyg7mW7bm0p7gwKFnoNWXbciE8=
|
||||
PresharedKey = 6V1dSygIB9cfq//EKLZmVl4qLVmKgHAqqeGQt84uvqY=
|
||||
Endpoint = 172.16.16.136:13231
|
||||
AllowedIPs = 0.0.0.0/0,::/0
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
CLIENT_PRIV_KEY=$(wg genkey)
|
||||
CLIENT_PUB_KEY=$(echo "${CLIENT_PRIV_KEY}" | wg pubkey)
|
||||
CLIENT_PRE_SHARED_KEY=$(wg genpsk)
|
||||
echo -e "CLIENT_PUB_KEY: $CLIENT_PUB_KEY \nCLIENT_PRE_SHARED_KEY: $CLIENT_PRE_SHARED_KEY"
|
||||
|
||||
|
||||
|
||||
|
||||
echo "[Interface]
|
||||
PrivateKey = ${CLIENT_PRIV_KEY}
|
||||
Address = ${CLIENT_WG_IPV4}/32,${CLIENT_WG_IPV6}/128
|
||||
DNS = ${CLIENT_DNS_1},${CLIENT_DNS_2}
|
||||
|
||||
[Peer]
|
||||
PublicKey = ${SERVER_PUB_KEY}
|
||||
PresharedKey = ${CLIENT_PRE_SHARED_KEY}
|
||||
Endpoint = ${ENDPOINT}
|
||||
AllowedIPs = 0.0.0.0/0,::/0" >>"${HOME_DIR}/${SERVER_WG_NIC}-client-${CLIENT_NAME}.conf"
|
||||
|
||||
# Add the client as a peer to the MikroTik (to client folder)
|
||||
echo "# WireGuard client peer configure
|
||||
/interface wireguard peers
|
||||
add allowed-address=${CLIENT_WG_IPV4}/32 comment=\\
|
||||
${SERVER_WG_NIC}-client-${CLIENT_NAME} interface=${SERVER_WG_NIC} \\
|
||||
preshared-key=\"${CLIENT_PRE_SHARED_KEY}\" public-key=\\
|
||||
\"${CLIENT_PUB_KEY}\"
|
||||
" >"${HOME_DIR}/mikrotik-peer-${SERVER_WG_NIC}-client-${CLIENT_NAME}.rsc"
|
||||
|
||||
# Add the client as a peer to the MikroTik
|
||||
echo "# WireGuard client peer configure
|
||||
/interface wireguard peers
|
||||
add allowed-address=${CLIENT_WG_IPV4}/32 comment=\\
|
||||
${SERVER_WG_NIC}-client-${CLIENT_NAME} interface=${SERVER_WG_NIC} \\
|
||||
preshared-key=\"${CLIENT_PRE_SHARED_KEY}\" public-key=\\
|
||||
\"${CLIENT_PUB_KEY}\"
|
||||
" >> "$(pwd)/wireguard/${SERVER_WG_NIC}/mikrotik/${SERVER_WG_NIC}.rsc"
|
||||
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue