{"id":8056,"date":"2022-01-14T10:46:28","date_gmt":"2022-01-14T02:46:28","guid":{"rendered":"https:\/\/blog.pfchina.org\/?p=8056"},"modified":"2022-01-15T08:18:46","modified_gmt":"2022-01-15T00:18:46","slug":"pfsense%e4%b8%adwireguard-%e7%ab%99%e7%82%b9%e5%88%b0%e5%a4%9a%e7%ab%99%e7%82%b9-vpn-%e9%85%8d%e7%bd%ae%e7%a4%ba%e4%be%8b","status":"publish","type":"post","link":"https:\/\/blog.pfchina.org\/?p=8056","title":{"rendered":"pfSense\u4f7f\u7528WireGuard\u8fdb\u884c\u591a\u7ad9\u70b9VPN\u8fde\u63a5\u914d\u7f6e\u793a\u4f8b"},"content":{"rendered":"

pfSense WireGuard\u7684\u4f5c\u8005Christian McDonald<\/a>\u5728\u00a0Netgate Docs<\/a>\u4e0a\u66f4\u65b0\u4e86\u4e00\u7bc7\u6587\u7ae0\uff0c\u4ecb\u7ecd\u4e86\u5728pfSense\u4e0a\u591a\u7ad9\u70b9\u4e4b\u95f4\u4f7f\u7528WireGuard VPN\u96a7\u9053\u7684\u65b9\u6cd5\uff0c\u73b0\u5728\u7ffb\u8bd1\u51fa\u6765\uff0c\u65b9\u4fbf\u5927\u5bb6\u914d\u7f6e\u7684\u65f6\u5019\u53c2\u8003\u3002<\/p>\n

pfSense WireGuard\u591a\u7ad9\u70b9VPN\u8fde\u63a5\u7f51\u7edc\u62d3\u6251\u56fe\u5982\u4e0b\uff1a<\/span><\/p>\n

<\/span>\"..\/_images\/diagrams-wireguard-site-to-multisite.png\"<\/a><\/div>\n
<\/div>\n
\u672c\u793a\u4f8b\u914d\u7f6e\u4fe1\u606f<\/span><\/div>\n
\n
\n\n\n\n<\/colgroup>\n\n\n\n\n\n
\u9879\u76ee<\/th>\n\u8bf4\u660e<\/th>\n<\/tr>\n<\/thead>\n
\u8bbe\u8ba1\u76ee\u6807<\/td>\n\u7ad9\u70b9\u5230\u591a\u7ad9\u70b9\uff0c\u6bcf\u4e2a\u96a7\u9053\u4e00\u4e2a\u5bf9\u7b49\u70b9\uff0c\u6bcf\u4e2a\u96a7\u9053\u591a\u4e2a\u5bf9\u7b49\u70b9<\/td>\n<\/tr>\n
\u96a7\u9053\u5b50\u7f51<\/td>\n172.16.0.0\/30<\/span><\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

1\u3001\u603b\u90e8\uff1a<\/p>\n

\n\n\n\n<\/colgroup>\n\n\n\n\n\n\n
<\/th>\n<\/th>\n<\/tr>\n<\/thead>\n
\u5e7f\u57df\u7f51 IP \u5730\u5740<\/td>\n198.51.100.10<\/span><\/code><\/td>\n<\/tr>\n
\u96a7\u9053\u5730\u5740<\/td>\n172.16.0.1\/30<\/span><\/code><\/td>\n<\/tr>\n
\u76d1\u542c\u7aef\u53e3<\/td>\n51820<\/span><\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

2\u3001\u8fdc\u7a0b\u529e\u516c\u5ba4 A\uff1a<\/p>\n

\n\n\n\n<\/colgroup>\n\n\n\n\n\n\n\n
<\/th>\n<\/th>\n<\/tr>\n<\/thead>\n
\u5e7f\u57df\u7f51 IP \u5730\u5740<\/td>\n198.51.100.100<\/span><\/code><\/td>\n<\/tr>\n
\u96a7\u9053\u5730\u5740<\/td>\n172.16.0.2\/30<\/span><\/code><\/td>\n<\/tr>\n
\u76d1\u542c\u7aef\u53e3<\/td>\n51820<\/span><\/code><\/td>\n<\/tr>\n
LAN \u5b50\u7f51<\/td>\n10.0.100.0\/24<\/span><\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

3\u3001\u8fdc\u7a0b\u529e\u516c\u5ba4 B\uff1a<\/p>\n

\n\n\n\n<\/colgroup>\n\n\n\n\n\n\n\n
<\/th>\n<\/th>\n<\/tr>\n<\/thead>\n
\u5e7f\u57df\u7f51 IP \u5730\u5740<\/td>\n198.51.100.200<\/span><\/code><\/td>\n<\/tr>\n
\u96a7\u9053\u5730\u5740<\/td>\n172.16.0.3\/30<\/span><\/code><\/td>\n<\/tr>\n
\u76d1\u542c\u7aef\u53e3<\/td>\n51820<\/span><\/code><\/td>\n<\/tr>\n
LAN \u5b50\u7f51<\/td>\n10.0.200.0\/24<\/span><\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n
\n

WireGuard \u914d\u7f6e<\/h1>\n

\u5728\u4e09\u4e2apfSense\u9632\u706b\u5899\u4e0a\uff0c\u5206\u522b\u5bfc\u822a\u5230VPN > WireGuard > \u8bbe\u7f6e\uff0c<\/strong>\u9009\u4e2d\u542f\u7528\uff0c<\/strong>\u63a5\u53e3\u7ec4\u6210\u5458\u9009\u62e9\u4ec5\u672a\u5206\u914d\u7684\u96a7\u9053<\/strong><\/em>\uff0c\u5982\u4e0b\u56fe\u6240\u793a\u3002<\/p>\n<\/div>\n

\n

\"\"<\/a><\/p>\n

\u6ce8\u610f\uff1a\u5f53\u5141\u8bb8\u6765\u81ea\u4efb\u610f\u8fdc\u7a0b\u7f51\u7edc\u7684\u5165\u7ad9\u8fde\u63a5\u65f6\uff0c\u53ea\u5728\u5206\u914d\u7684WireGuard \u63a5\u53e3\u9009\u9879\u5361\u4e0a\u4f7f\u7528\u89c4\u5219\u6765\u786e\u4fdd\u6b63\u786e\u7684\u8fd4\u56de\u8def\u7531\u3002<\/div>\n
<\/div>\n
\u5206\u914d\u7684WireGuard \u63a5\u53e3\u9009\u9879\u5361\u4e0a\u7684\u89c4\u5219\u5f97\u5230reply-to\uff0c\u53ef\u4ee5\u786e\u4fdd\u8fdb\u5165\u7279\u5b9a\u5206\u914d\u7684WireGuard \u63a5\u53e3\u7684\u6d41\u91cf\u4f7f\u7528\u540c\u4e00\u63a5\u53e3\u3002\u5426\u5219\uff0c\u8fd4\u56de\u6d41\u91cf\u5c06\u4f7f\u7528\u9ed8\u8ba4\u7f51\u5173\u3002<\/div>\n
<\/div>\n<\/div>\n

\u96a7\u9053\u914d\u7f6e<\/h2>\n

\u5728\u4e09\u4e2a\u7ad9\u70b9\u4e0a\u5206\u522b\u521b\u5efa WireGuard \u96a7\u9053\uff1a\u5bfc\u822a\u5230VPN > WireGuard > \u96a7\u9053\uff0c<\/strong>\u5355\u51fb” “\u6dfb\u52a0\u96a7\u9053<\/strong>\uff0c\u4f7f\u7528\u7f51\u7edc\u62d3\u6251\u56fe\u4e0a\u7684\u4fe1\u606f\u586b\u5199\u9009\u9879\uff0c\u5e76\u6ce8\u660e\u6bcf\u4e2a\u7ad9\u70b9\u7684\u53d8\u5316\u3002\u9009\u4e2d\u542f\u7528\uff0c\u5e76\u586b\u5199\u4e0d\u540c\u7684\u63cf\u8ff0\u4fe1\u606f\u3002\u76d1\u542c\u63a5\u53e3\u9009\u9ed8\u8ba451820\u5373\u53ef\uff0c\u63a5\u53e3\u5bc6\u7801\u70b9\u53f3\u4fa7\u7684\u751f\u6210\u6309\u94ae\u521b\u5efa\u3002\u6ce8\u610f\u8bb0\u5f55\u6bcf\u4e2a\u9632\u706b\u5899\u7684\u516c\u94a5\u4fe1\u606f\u5e76\u5907\u6ce8\u3002\u4e0b\u9762\u662f\u603b\u90e8\u7684\u8bbe\u7f6e\u4fe1\u606f\uff0c\u5176\u4ed6\u7684\u4e24\u4e2a\u529e\u516c\u5ba4\u53c2\u7167\u8bbe\u7f6e\u3002<\/p>\n

\n

\"\"<\/a>\u8bbe\u7f6e\u5b8c\u6210\u4ee5\u540e\uff0c\u70b9\u51fb\u4fdd\u5b58\uff0c\u624d\u80fd\u5728\u540e\u9762\u6dfb\u52a0\u8fdc\u7a0b\u7aef\u70b9\u3002<\/p>\n

<\/dl>\n

\u8fdc\u7a0b\u7aef\u70b9\u914d\u7f6e<\/h2>\n<\/div>\n
\u5bfc\u822a\u5230VPN > WireGuard > \u96a7\u9053\uff0c<\/strong>\u627e\u5230\u521a\u624d\u6dfb\u52a0\u7684WireGuard\u96a7\uff0c\u5355\u51fb\u96a7\u9053\u884c\u7684\u672b\u5c3e\u7f16\u8f91\u56fe\u6807\uff0c\u6253\u5f00\u96a7\u9053\u7f16\u8f91\u9875\u9762\uff0c\u5728\u9875\u9762\u5e95\u90e8\uff0c\u70b9\u51fb\u6dfb\u52a0\u5bf9\u7aef\uff1a<\/div>\n
<\/div>\n
1\u3001\u603b\u90e8\u8bbe\u7f6e\u3002\u6dfb\u52a0\u4e24\u4e2a\u8fdc\u7a0b\u529e\u516c\u5ba4\u7aef\u70b9\u3002<\/div>\n
\u529e\u516c\u5ba4A\u8bbe\u7f6e\u4fe1\u606f\u5982\u4e0b\u56fe\u6240\u793a\uff0c\u8fd9\u91cc\u7684\u516c\u94a5\u586b\u5199\u5728\u529e\u516c\u5ba4A\u4e0a\u751f\u6210\u7684\u3002<\/div>\n
<\/div>\n
\"\"<\/a><\/div>\n
<\/div>\n
\u529e\u516c\u5ba4B\u8bbe\u7f6e\u4fe1\u606f\u5982\u4e0b\u56fe\u6240\u793a\uff0c\u8fd9\u91cc\u7684\u516c\u94a5\u586b\u5199\u5728\u529e\u516c\u5ba4B\u4e0a\u751f\u6210\u7684\u3002<\/div>\n
<\/div>\n
\"\"<\/a><\/div>\n
<\/div>\n
2\u3001\u8fdc\u7a0b\u529e\u516c\u5ba4A\u8bbe\u7f6e<\/div>\n
<\/div>\n
\u5728\u8fdc\u7a0b\u529e\u516c\u5ba4A\uff0c\u627e\u5230\u521a\u624d\u6dfb\u52a0\u7684WireGuard\u96a7\u9053\uff0c\u5355\u51fb\u96a7\u9053\u884c\u7684\u672b\u5c3e\u7f16\u8f91\u56fe\u6807\uff0c\u6253\u5f00\u96a7\u9053\u7f16\u8f91\u9875\u9762\uff0c\u5728\u9875\u9762\u5e95\u90e8\uff0c\u70b9\u51fb\u6dfb\u52a0\u603b\u90e8\u7684\u7aef\u70b9\u4fe1\u606f\uff0c\u6ce8\u610f\u8fd9\u91cc\u7684\u516c\u94a5\u586b\u603b\u90e8\u4e0a\u751f\u6210\u7684\uff0c\u5141\u8bb8IP\u586b\u4e0a\u8fdc\u7a0b\u529e\u516c\u5ba4B\u7684\u5b50\u7f51\u3002<\/div>\n
<\/div>\n
\"\"<\/a><\/div>\n
<\/div>\n
3\u3001\u8fdc\u7a0b\u529e\u516c\u5ba4B\u8bbe\u7f6e<\/div>\n
<\/div>\n
\u5728\u8fdc\u7a0b\u529e\u516c\u5ba4B\uff0c\u627e\u5230\u521a\u624d\u6dfb\u52a0\u7684WireGuard\u96a7\u9053\uff0c\u5355\u51fb\u96a7\u9053\u884c\u7684\u672b\u5c3e\u7f16\u8f91\u56fe\u6807\uff0c\u6253\u5f00\u96a7\u9053\u7f16\u8f91\u9875\u9762\uff0c\u5728\u9875\u9762\u5e95\u90e8\uff0c\u70b9\u51fb\u6dfb\u52a0\u603b\u90e8\u7684\u7aef\u70b9\u4fe1\u606f\uff0c\u6ce8\u610f\u8fd9\u91cc\u7684\u516c\u94a5\u4e5f\u662f\u586b\u603b\u90e8\u4e0a\u751f\u6210\u7684\uff0c\u5141\u8bb8IP\u586b\u4e0a\u8fdc\u7a0b\u529e\u516c\u5ba4A\u7684\u5b50\u7f51\u3002<\/div>\n
<\/div>\n
\"\"<\/a><\/div>\n

<\/h1>\n

\u5206\u914d\u63a5\u53e3<\/span><\/h1>\n
\n

\u8fd9\u4e9b\u6b65\u9aa4\u5fc5\u987b\u5728\u4e09\u4e2a\u7ad9\u70b9\u4e0a\u540c\u65f6\u5b8c\u6210\u3002<\/p>\n

\u9996\u5148\uff0c\u4fee\u590d\u9ed8\u8ba4\u7f51\u5173\uff0c\u786e\u4fdd\u4e0d\u4f1a\u81ea\u52a8\u9009\u62e9 WireGuard\uff1a\u5bfc\u822a\u5230\u7cfb\u7edf > \u8def\u7531\uff0c\u5c06\u9ed8\u8ba4\u7f51\u5173IPv4\u8bbe\u7f6e\u4e3a\u7279\u5b9a\u7f51\u5173\uff08\u4f8b\u5982WANGW<\/em>\uff09\u6216\u7ec4\uff0c\u5982\u679c\u6b64 VPN \u4e5f\u5c06\u627f\u8f7d IPv6 \u6d41\u91cf\uff0c\u8bf7\u4ee5\u7c7b\u4f3c\u65b9\u5f0f\u8bbe\u7f6e\u9ed8\u8ba4\u7f51\u5173 IPv6\uff0c\u4fdd\u5b58\u540e\u5e76\u5e94\u7528\u66f4\u6539\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n

\"\"<\/a><\/p>\n

\u63a5\u4e0b\u6765\uff0c\u5206\u914dWireGuard\u4f7f\u7528\u7684<\/span>\u63a5\u53e3\uff1a<\/p>\n