WIREGUARD VPN Server Configuration on Asus Routers [Client VPN]

0:00 hi in this video I want to talk about the wireguard VPN and I actually want to use it to set up my own VPN server now when you want to use a VPN you usually have two options right I mean you can either use one of those VPN service providers which they have their own VPN servers in many countries this option though unfortunately is not usually free and you gotta pay like monthly or yearly subscription fees or you can set up your own VPN server even at home and as long as you have the right Hardware this is going to be free I mean no subscription would be necessary and that's what we're gonna do in this video now for the VPN server I'm going to use an Asus rtax 86u wireless router Asus

0:45 wireless routers usually come with many features including a VPN server and the support for the wireguard has recently been added to the firmware it's not like every Asus wireless router supports it though at least not right now but there is a link in the video description that would show you what models are supported and so on so forth so definitely check it out if you are interested when we are setting up a VPN server we know that there are different VPN protocols to choose from for example wireguard is one of them there are different VPN scenarios that we can Implement as well for example a side-to-site VPN or a client VPN so in this video we're gonna use wireguard in a client VPN configuration where there is a VPN server and some clients that would

1:31 remotely connect to the server through a VPN connection hopefully in other videos we get to talk about other VPN scenarios as well now let's quickly see what this wireguard is all about wireguard is an open source VPN protocol which is rather new in the VPN world it is focused on being simple easy to use fast and at the same time secure which is good here's for example some benchmarks from their website this shows that it can outperform ipsec and openvpn in throughput and ping tests which is very interesting Now it only uses UDP and not TCP and the default port number is 51820 and UDP is faster than TCP because it

2:17 doesn't need a handshake between the clients and This Server basically it is connectionless wire guard also has less code compared to some other VPN protocols which means it is lightweight which again means it is beneficial not only for the devices that are involved but for the people that are involved as well I mean it is less process intensive let's say for the server and the client machines and also it is much easier for the engineers to find any bugs or any potential vulnerabilities now before doing anything I'll make sure I have installed the wireguard software or app on all the client devices they're going to use that to connect to the VPN server and as you can see it is available for all kinds of operating

3:03 systems now when the server is configured then I can either import that configuration file and use it here to connect or if the client's device is a smartphone I can also import that configuration by scanning a QR code we'll get to that later now let's set up the server so when I log into the router I should go to the VPN section and under the VPN server tab click on the wireguard VPN now as far as details we have general settings and advanced settings first let's take a look at the general settings if I want to use the VPN tunnel to also be able to access my local network resources AKA intranet then I should enable this feature otherwise I won't be

3:49 able to access my local network resources remotely and the VPN tunnel will be used only to reroute my internet connection this is where I should have specified the IP address for the VPN interface of the server the wireless router has different interfaces for example Lan and run and they have their own IP addresses this one though is going to be used for the VPN tunnel so I can use ipv4 IPv6 or maybe both of them for the VPN tunnel I'm just going to use the default one which happened to be an ipv4 so if I use this default address then the VPN server will be 10.6.0.1 the first client will be 10.6.0.2 and the second client will be

4:36 10.6.0.3 and so on so forth this is the default UDP Port that wireguard uses I can change it to something else if I need to for example if I realize this port number for whatever reason is blocked on the client side I can use a different port number the thing though is that I cannot use a TCP port here is where I can add the VPN clients but before I do that let's take a look at the advanced settings first and then we'll come back here again if I enable the allow DNS option then it will also advertise the IP address of the VPN server as the DNS server for the client you can see that in the configuration file as well I'm happy with that so I'm just going to make sure

5:22 it is enabled this one as it says will enable Nat for IPv6 so the clients need to be netted to the public IP address of the server so they can have internet access through the VPN tunnel I can guess it is automatically enabled for ipv4 which is what we are using in this example and this one if we were to use IPv6 could also enable it for that pre-shared key is an optional and extra security feature and I'm gonna make sure it is enabled it is also going to show up in the configuration file the persistent Keeper Live is just a keep alive packet which by default here is going to be sent out every 25 seconds to the peers to make sure they're still connected and I'm not gonna change it

6:08 each pier in wireguard has a public key and a private key this pair of keys is actually called an asymmetric keeper which is used to uniquely identify the peers as well as encrypting the communication between the peers for example these are the keys for this pier which happen to be the server now let's add a VPN client and see if we can connect as you can see it is telling me that I can add up to 10 clients I'm not sure if this number would be any different in a different wireless router but 10 should be enough for us as home internet users here I can give a name to this particular VPN client this one is just

6:53 for testing and I'm gonna name it test number one the more settings would make much more sense if I were to create a side-to-site VPN and it is something that hopefully we can talk about in another video [Music] so here is where I should find the QR code that I talked about before I can scan the QR code on my phone which should add the tunnel for me and then I can connect I can also export the configuration file send it to the client import it over there which should do the same thing [Music] the interesting thing is that the connection process is surprisingly fast so fast that sometimes I even doubt if it is really connected of course one way just to double check to make sure it is connected is by checking the public IP

7:41 address of the client before and after the connection because after it is connected the IP address should change to the IP address of this server and I can easily check that by just Googling what is my IP now just keep in mind that in this video I used an Asus wireless router for the VPN server because first of all that is my main wireless router here at home also now that it is supporting the wire guard in its graphical user interface doing it as we saw is just so easy but if I have a different wireless router which doesn't natively allow me to install the wire guard I might still be able to install it through a third-party firmware such as the DDWRT or openwrt now let me know in the comments below if you have any questions and also if you think I should make more videos on VPN but maybe more

8:28 in interesting scenarios let me know what you think thank you very much for watching this video I hope you liked it give it a thumbs up if you did share it if you think others might like it too and subscribe to the channel if you want to see more videos like this thank you again and I will see you next time [Music]