blob: d86ba5f00dcb91f330b974df65e6bcb4625acf05 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Peering Configuration</title>
</head>
<body>
<h1>Peering Configuration</h1>
<p>Here are the information needed for you to setup:</p>
<ul>
<li>WireGuard Endpoint: ${endpoint}:${wgPort}</li>
<li>dn42 IPv4 Address: ${ipv4}</li>
<li>dn42 IPv6 Address: ${ipv6}</li>
<li>ASN: AS${asn}</li>
<li>WireGuard Public Key: ${wgSelfPubkey}</li>
<li>WireGuard Preshared Secret: ${wgPresharedSecret}</li>
<li>MP-BGP: ${mpbgp?string('Yes', 'No')}</li>
</ul>
<#if show_example_config>
<h2>Example Configuration</h2>
<p>Notice: The following configuration is for newcomers or referencing purposes only.
You should always check and modify them according to your environment.
<b>Bold parts are placeholders and you should customize them.</b></p>
<h3>BIRD2 Configuration</h3>
<p>You first need to setup your BIRD2 by following <a href="https://wiki.dn42.us/howto/Bird2">dn42 Wiki</a>.</p>
<pre>
# /etc/bird/peers/<b><Custom Name></b>.conf
<#if !mpbgp>
protocol bgp dn42_<b><Custom Name></b> from dnpeers {
neighbor ${ipv4} as ${asn};
direct;
}
</#if>
<#if peer_ipv6??>
protocol bgp dn42_<b><Custom Name></b>_v6 from dnpeers {
neighbor ${ipv6}<#if peer_link_local><b>%<Your WireGuard interface name></b>;</#if> as ${asn};
direct;
}
</#if>
</pre>
<#if peer_type == "WIREGUARD">
<h3>WireGuard Configuration</h3>
<p>Choose ONE of the follow method.</p>
<h4>wg-quick</h4>
<pre>
# /etc/wireguard/<b><Your WireGuard interface name></b>.conf
[Interface]
<#if peer_wg_listen_port??>
ListenPort = ${peer_wg_listen_port?long?c}
</#if>
PrivateKey = <b><Your WireGuard Private Key></b>
PostUp = ip addr add dev <b><Your WireGuard interface name></b> ${peer_ipv4}/32 peer ${ipv4}/32
<#if peer_ipv6??>
<#if peer_link_local>
PostUp = ip addr add dev <b><Your WireGuard interface name></b> ${peer_ipv6}/64
<#else>
PostUp = ip addr add dev <b><Your WireGuard interface name></b> ${peer_ipv6}/64 peer ${ipv6}/64
</#if>
</#if>
Table = off
[Peer]
PublicKey = ${wgSelfPubkey}
PresharedKey = ${wgPresharedSecret}
Endpoint = ${endpoint}:${wgPort}
AllowedIPs = 0.0.0.0/0, ::/0
</pre>
</#if>
<p>Then, enable and start wg-quick service. For systemd users, you may want to use systemctl enable --now wg-quick@<b><Your WireGuard interface name></b>.</p>
</#if>
<a href="/manage">Back</a>
</body>
</html>
|
