Differences

This shows you the differences between two versions of the page.

--- redhat:other-redhat:wireguard-redhat [2019/05/06 14:23] – [Weiteres] michael
+++ redhat:other-redhat:wireguard-redhat [2020/01/31 22:56] (current) – michael
@@ Line 10: / Line 10: @@
-===== Install VPN-Server on CentOS 7.x =====
+===== Install VPN-Server on CentOS 7 / 8 =====
 ''<wrap hi>For the **Debian** installation Tutorial klick **[[debian:other-debian:wireguard-debian|here]]**</wrap>''
@@ Line 23: / Line 23: @@
 </WRAP>
+<wrap em>For CentOS 7 ONLY:</wrap>
 <code>
+# yum install epel-release
 # curl -Lo /etc/yum.repos.d/wireguard.repo https://copr.fedorainfracloud.org/coprs/jdoss/wireguard/repo/epel-7/jdoss-wireguard-epel-7.repo
 # yum update
 # yum install wireguard-dkms wireguard-tools
+</code>
+<wrap em>For CentOS 8 ONLY:</wrap>
+<code>
+# yum install epel-release
+# yum config-manager --set-enabled PowerTools
+# yum copr enable jdoss/wireguard
+# yum install wireguard-dkms wireguard-tools
+</code>
+<wrap em>continue here:</wrap>
+<code>
 # mkdir /etc/wireguard && cd /etc/wireguard/
@@ Line 60: / Line 75: @@
 <WRAP center box 100%>
 <code>
-# vim /etc/sysctl.d/99-sysctl.conf
+# echo "net.ipv4.ip_forward=1" >> /etc/sysctl.d/99-sysctl.conf
+# echo "net.ipv4.conf.all.forwarding=1" >> /etc/sysctl.d/99-sysctl.conf
+# echo "net.ipv6.conf.all.forwarding=1" >> /etc/sysctl.d/99-sysctl.conf
+# cat /etc/sysctl.d/99-sysctl.conf
 </code>
-<sxh bash; highlight: [11]>
+<sxh bash; highlight: [11-13]>
 # sysctl settings are defined through files in
 # /usr/lib/sysctl.d/, /run/sysctl.d/, and /etc/sysctl.d/.
@@ Line 75: / Line 94: @@
 # For more information, see sysctl.conf(5) and sysctl.d(5).
 net.ipv4.ip_forward=1
+net.ipv4.conf.all.forwarding=1
+net.ipv6.conf.all.forwarding=1
 </sxh>
 </WRAP>
@@ Line 83: / Line 104: @@
 # systemctl enable wg-quick@wg0.service
 </code>
+<WRAP center round important 100%>
+''Setup POSTROUTING, do this ONLY if you don't want to setup routing!
+''
+<code>
+# firewall-cmd --permanent --direct --add-rule ipv4 nat POSTROUTING 0 -s 192.168.100.0/24 ! -d 192.168.100.0/24 -j SNAT --to 192.168.1.8
+# firewall-cmd --reload
+</code>
+</WRAP>
 <WRAP center box 100%>
@@ Line 127: / Line 158: @@
 ==== Fritzbox - Routing Konfigurieren ====
-<wrap em>Nur falls kein Masquarading als Inrtface Forewarding eingesetzt wird. (So wie in diesem Tutorial)</wrap>
+<wrap em>Nur falls kein POSTROUTING als Interface Forewarding eingesetzt wird. (So wie in diesem Tutorial)</wrap>