WIREGUARD VPN Server Configuration on Asus Routers [Client VPN]

Brief Summary

This video explains how to set up a VPN server using WireGuard on an ASUS wireless router. It covers the benefits of using WireGuard, the necessary configurations on the router, and how to connect clients to the VPN. The video also touches on advanced settings and alternative setups using third-party firmware.

• WireGuard is a fast, secure, and easy-to-use VPN protocol.
• Setting up a VPN server at home can be a free alternative to paid VPN services.
• ASUS routers with WireGuard support simplify the setup process.

Introduction

The video introduces the concept of setting up a personal VPN server using WireGuard, contrasting it with paid VPN services. The presenter uses an ASUS RT-AX86U wireless router, which supports WireGuard in its firmware. The video focuses on a client VPN configuration, where remote clients connect to the server through a VPN connection. The presenter mentions that a link in the video description shows which models are supported.

What is WireGuard?

WireGuard is described as an open-source VPN protocol known for its simplicity, speed, and security. It outperforms IPsec and OpenVPN in throughput and ping tests. WireGuard uses UDP (default port 51820) instead of TCP, which makes it faster due to its connectionless nature. The protocol's lightweight code base simplifies debugging and reduces processing overhead for both server and client machines.

How to Setup?

Before configuring the server, the presenter emphasizes the need to install the WireGuard software on all client devices. The software is available for various operating systems. The configuration file can be imported to connect, or a QR code can be scanned for smartphones. The presenter logs into the ASUS router and navigates to the VPN section to configure WireGuard. General settings include enabling access to local network resources (intranet) and specifying the IP address for the VPN interface. The default IP address is 10.6.0.1 for the server, with subsequent clients receiving addresses like 10.6.0.2, 10.6.0.3, etc. The default UDP port is 51820, but it can be changed if necessary, although TCP ports are not supported. Advanced settings include enabling the "Allow DNS" option to advertise the VPN server's IP address as the DNS server for the client. A pre-shared key is enabled as an optional security feature. Each peer in WireGuard has a public and private key pair (asymmetric key pair) for identification and encryption. The presenter adds a VPN client, names it "test number one", and shows how to find the QR code for easy configuration. The connection process is described as fast. The presenter confirms the connection by checking the change in the client's public IP address. The video concludes by mentioning that while an ASUS router is used for this demonstration, WireGuard can also be installed on other routers using third-party firmware like DD-WRT or OpenWRT.