{"id":7017,"date":"2021-04-24T16:20:20","date_gmt":"2021-04-24T08:20:20","guid":{"rendered":"https:\/\/blog.pfchina.org\/?p=7017"},"modified":"2021-07-24T10:53:14","modified_gmt":"2021-07-24T02:53:14","slug":"opnsense-wireguard-vpn%e6%9c%8d%e5%8a%a1%e5%99%a8%e8%ae%be%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/blog.pfchina.org\/?p=7017","title":{"rendered":"OPNSense WireGuard VPN\u670d\u52a1\u5668\u8bbe\u7f6e"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
\n
\n

OPNSense\u4e0a\u96c6\u6210\u4e86WireGuard\u63d2\u4ef6\uff0c\u9664\u4e86\u53ef\u4ee5\u914d\u7f6e\u4e3a\u7ad9\u70b9\u5230\u7ad9\u70b9\u7684\u8fde\u63a5\u4ee5\u5916\uff0c\u4e5f\u53ef\u4ee5\u914d\u7f6e\u6210\u670d\u52a1\u5668->\u5ba2\u6237\u7aef\u6a21\u5f0f\uff0c\u65b9\u4fbf\u6211\u4eec\u4f7f\u7528\u624b\u673a\u7b49\u7ec8\u7aef\u8fdb\u884c\u8fdc\u7a0b\u8bbf\u95ee\u3002<\/p>\n

\u5b89\u88c5WireGuard<\/h1>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230System -> Firmware -> Plugins ->\uff0c\u5b89\u88c5os-wireguard\u63d2\u4ef6\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u542f\u7528\u670d\u52a1<\/h1>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230VPN-> WireGuard\uff0c\u9009\u4e2d\u542f\u7528WireGuard\u3002\u7136\u540e\u70b9\u51fb\u4fdd\u5b58\u5e76\u5e94\u7528\u66f4\u6539\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u6dfb\u52a0\u672c\u5730\u670d\u52a1\u5668<\/h1>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230VPN -> WireGuard -> Local\uff0c\u70b9\u51fb\u6dfb\u52a0\uff0c\u586b\u5199\u670d\u52a1\u5668\u5404\u9879\u53c2\u6570\u5e76\u4fdd\u5b58\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u6dfb\u52a0\u65b0\u7aef\u70b9<\/h1>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230VPN -> WireGuard -> Endpoints\uff0c\u70b9\u51fb\u6dfb\u52a0\uff0c\u6dfb\u52a0\u4e00\u4e2a\u65b0\u7aef\u70b9\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u914d\u7f6e\u624b\u673a\u7aef\u70b9<\/h1>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5728android\u624b\u673a\u4e0a\u6dfb\u52a0\u65b0\u7684\u5bf9\u7aef\u3002\u6309\u201c\u6dfb\u52a0\u5bf9\u7aef\u201d\u540e\uff0c\u5c06\u624b\u673a\u4e0a\u7684\u5e94\u7528\u7a0b\u5e8f\u6700\u5c0f\u5316\uff0c\u4ee5\u4fbf\u63a5\u6536\u548c\u590d\u5236\u670d\u52a1\u5668\u516c\u94a5\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"Wireguard\u5ba2\u6237\u7aefAndroid\"<\/a><\/div>\n<\/div>\n<\/div>\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u4ea4\u6362\u516c\u94a5<\/h3>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230VPN -> WireGuard -> Local\uff0c\u70b9\u51fb\u7f16\u8f91\u3002\u7136\u540e\u590d\u5236\u516c\u94a5\u5e76\u5c06\u5176\u53d1\u9001\u7ed9\u5230\u624b\u673a\u3002\u586b\u5199\u670d\u52a1\u5668\u5730\u5740\u3001\u7aef\u53e3\u7684\u4fe1\u606f\uff0c\u201c\u5141\u8bb8\u7684IP\u201d\u6307\u5b9a\u4e3a\u201c0.0.0.0\/0\u201d\u3002\u5728OPNSense\u7aef\uff0c\u6839\u636e\u9700\u8981\u9009\u62e9\u5ba2\u6237\u7aef\uff08\u5bf9\u7b49\uff09\u6216\u591a\u4e2a\u5bf9\u7b49\u7aef\uff0c\u7136\u540e\u5355\u51fb\u201c\u4fdd\u5b58\u201d\uff0c\u5728\u624b\u673a\u5ba2\u6237\u7aef\u4e0a\uff0c\u5355\u51fb\u201c\u4fdd\u5b58\u201d\u56fe\u6807\u3002<\/p>\n

\u6ce8\u610f\uff1a\u201c\u5141\u8bb8\u7684IP\u201d\u4f1a\u5c06\u8def\u7531\u8868\u6dfb\u52a0\u5230\u4f60\u7684\u5ba2\u6237\u7aef\uff0c\u5982\u679c\u8981\u4f7f\u7528\u5206\u5272\u96a7\u9053\u7c7b\u578b\u7684\u8bbe\u7f6e\uff0c\u8bf7\u6307\u5b9a\u6240\u6709\u5141\u8bb8\u7684\u5185\u90e8CIDR\uff0c\u5e76\u4ee5\u9017\u53f7\u5206\u9694\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5c06\u914d\u7f6e\u4fdd\u5b58\u5728\u624b\u673a\u4e0a\u540e\uff0c\u8fd4\u56de\u670d\u52a1\u5668\u5217\u8868\uff0c\u70b9\u51fb\u670d\u52a1\u5668\u540d\u79f0\uff0c\u7136\u540e\u5728\u516c\u5171\u5bc6\u94a5\u533a\u57df\u4e2d\u70b9\u51fb\u4e00\u6b21\u4ee5\u4fbf\u5c06\u5bc6\u94a5\u590d\u5236\u5230\u526a\u8d34\u677f\u5e76\u5c06\u5176\u53d1\u9001\u5230\u8ba1\u7b97\u673a\u3002<\/p>\n

\u5728OPNSense\u4e0a\uff0c\u8f6c\u5230VPN -> WireGuard -> Endpoints \uff0c\u70b9\u51fb\u7f16\u8f91\u3002\u4ece\u624b\u673a\u4e2d\u5c06\u516c\u94a5\u7c98\u8d34\u5230\u201c\u516c\u94a5\u201d\u6587\u672c\u533a\u57df\u4e2d\uff0c\u7136\u540e\u5355\u51fb\u201c\u4fdd\u5b58\u201d\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n
\n
\n
\"\"<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

\u6dfb\u52a0WAN\u63a5\u53e3\u9632\u706b\u5899\u89c4\u5219<\/h1>\n

\u5728WAN\u63a5\u53e3\u9009\u9879\u5361\u4e0a\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219\uff0c\u4ee5\u5141\u8bb8WireGuard\u4e0e\u9632\u706b\u5899\u8fdb\u884c\u901a\u4fe1\u3002<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n

\u5bfc\u822a\u5230Firewall -> Rules -> Floating\uff0c\u70b9\u51fb\u6dfb\u52a0\uff0c\u6dfb\u52a0\u4e00\u6761\u65b0\u89c4\u5219\uff1a<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n