Wirguard Full-Tunnel VPN

Client

Raspberry

• apt install wireguard
• cat /etc/wireguard/wg0.conf

[Interface]
Address = fd00:1234:5678:9abc::2, 172.30.35.2
PrivateKey = xxxxxxxxxxxxxxxxx
[Peer]
PublicKey = xxxxxxxxxxxxxxxxx
PresharedKey = xxxxxxxxxxxxxxxxx
AllowedIPs = 0.0.0.0/0, ::/0 
Endpoint = px.men.de:51821
PersistentKeepalive = xxxxxxxxxxxxxxxxx

Server

cat wg0.conf

# Description:
[Interface]
Address = 172.30.35.1,fd00:1234:5678:9abc::1
PrivateKey = xxxxxxxxxxxxxxxxx
ListenPort = 51821

# Peer: ipv6 Tunnel
[Peer]
PublicKey = xxxxxxxxxxxxxxxxx
PresharedKey = xxxxxxxxxxxxxxxxx
AllowedIPs = 2aZZ:24YY:71:3000::/56,fd00:1234:5678:9abc::/64,172.30.34.0/24

PFSense

Tunnel anlegen

Peer konfigurieren

Tunnel Interface als reales anlegen

IPs auf dem Interface vergeben

Gateways für IPv4 und Ipv6 anlegen

IPv6 Route setzen

IPv4 Route setzen