77fa3770cebffbdbad6772239cb03b325d12b693
howto/wireguard.md
... | ... | @@ -82,16 +82,14 @@ An example wg-quick script that incorporates the above two workarounds is below, |
82 | 82 | [Interface] |
83 | 83 | PrivateKey = <your private key> |
84 | 84 | Address = <MyIPv4>/32, <MyIPv6>/128 |
85 | -PostUp = /sbin/ip addr del dev wg0 <MyIPv4>/32 && /sbin/ip addr add dev wg0 <MyIPv4>/32 peer <PeerIPv4>/32 && /sbin/ip addr del dev wg0 <MyIPv6>/128 && /sbin/ip addr add dev wg0 <MyIPv6>/128 peer <PeerIPv6>/128 |
|
85 | +PostUp = /sbin/ip addr del dev wg0 <MyIPv4>/32 && /sbin/ip addr add dev wg0 <MyIPv4>/32 peer <PeerIPv4>/32 |
|
86 | +PostUp = /sbin/ip addr del dev wg0 <MyIPv6>/128 && /sbin/ip addr add dev wg0 <MyIPv6>/128 peer <PeerIPv6>/128 |
|
86 | 87 | Table = off |
87 | 88 | |
88 | 89 | [Peer] |
89 | 90 | Endpoint = <your peer's wireguard endpoint> |
90 | 91 | PublicKey = <your peer's public key> |
91 | -AllowedIPs = 172.16.0.0/12 |
|
92 | -AllowedIPs = 10.0.0.0/8 |
|
93 | -AllowedIPs = fd00::/8 |
|
94 | -AllowedIPs = fe80::/10 |
|
92 | +AllowedIPs = 172.16.0.0/12, 10.0.0.0/8, fd00::/8, fe80::/10 |
|
95 | 93 | ``` |
96 | 94 | Use `which ip` to get the full path to your ip binary. |
97 | 95 |