Quelltext der Seite UTM/VPN/WireGuard-BestPractice

{{Set_lang}}

{{#vardefine:headerIcon|spicon-utm}}
{{:UTM/VPN/WireGuard-BestPractice.lang}}

</div><div class="new_design"></div><!--{{Select_lang}}-->{{TOC2}}
{{Header|11.2024|new=true|
Menu={{Menu-UTM|VPN|WireGuard}}
}}
----

=== {{#var:Vorbemerkung}} ===
<div class="einrücken">
{{#var:Vorbemerkung--desc}}
{| class="sptable2 pd5 monospace-end striped"
|-
!  !! {{#var:Standort}} A !! {{#var:Standort}} B !! Roadwarrior !! {{#var:Transfernetz}}
|-
| '''FQDN''' || a.vpn.anyideas.de || b.vpn.anyideas.de || class=center | – || class=center | –
|-
| '''{{#var:Netz IPv4}}''' || class=end | 10.1.0.0/16 || class=end | 10.2.0.0/16 || class=center | – || class=end | 10.0.1.0/24
|-
| '''{{#var:Lokale Tunnel IPv4}}''' || class=end | 10.0.1.1/24 || class=end | 10.0.1.2/24 || class=end | 10.0.1.201/24 || class=center | –
|-
| '''{{#var:Netz IPv6}}''' || class=end | fd00:a:0:0::0/64 || class=end | fd00:b:0:0::0/64 || class=center | –  || class=end | fd00:0:0:0::0/64
|-
| '''{{#var:Lokale Tunnel IPv6}}''' || class=end | fd00:0:0:0::1/64 || class=end | fd00:0:0:0::2/64 || class=end | fa00:0:0:0::C9/64 || class=center | –
|}

{{Hinweis-box| {{#var:Best-Practice Hinweis}} | g | fs__icon=em2}}
</div>
----

=== {{#var:Schlüsselerstellung}} ===
{| class="sptable2 pd5 zh1 Einrücken noborder"
| colspan=2 | {{#var:Schlüsselerstellung--desc}}
|-
| rowspan=2 | {{#var:Schlüssel erzeugen--desc}}
| class=Bild | {{Bild|{{#var:Schlüssel erzeugen Standort A--Bild}}|{{#var:Schlüssel erzeugen Standort A--cap}}||{{#var:Schlüssel hinzufügen}}|{{#var:Authentifizierung}}|{{#var:Schlüssel}}|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
|-
| class=Bild | {{Bild|{{#var:Schlüssel erzeugen Standort B--Bild}}|{{#var:Schlüssel erzeugen Standort B--cap}} }}
|-
| {{#var:Schlüssel erzeugen E2S-Peer--desc}}
| class=Bild | {{Bild|{{#var:Schlüssel erzeugen E2SPeer--Bild}}|{{#var:Schlüssel erzeugen E2SPeer--cap}} }}
|-
| {{#var:Schlüssel Exporteinstellungen--desc}}
| class=Bild | {{Bild|{{#var:Schlüssel Exporteinstellungen--Bild}}|{{#var:Schlüssel Exporteinstellungen--cap}}||{{#var:Schlüssel}}|{{#var:Authentifizierung}}|icon=none}}
|-
| {{#var:Öffentlichen Schlüssel übertragen--desc}}
| class=Bild | {{Bild|{{#var:Öffentlichen Schlüssel kopieren--Bild}}|{{#var:Öffentlichen Schlüssel kopieren--cap}} }}
|-
| <div class="einrücken">
{{#var:Öffentlichen Schlüssel übertragen--desc2}}
{| class="sptable2 pd5 zh1 Einrücken nonoborder"
| {{b|{{#var:Quelle}}:}} || {{Button|Datei}}{{Button|Zwischenablage|class=aktiv}}
|-
| {{b|{{#var:Name}}:}} || {{ic|{{#var:Name--val}}|class=available}}
|-
| {{b|{{#var:Schlüsselwert}}:}} || {{ic|{{#var:Aus der Zwischenabalage}}<nowiki>…DQ=</nowiki>|cb|class=available}}
|-
| {{b|{{#var:Dateityp}}:}} || {{ic|X25519|dr|class=available}}
|-
| {{b|{{#var:Format}}:}} || {{ic|RAW|dr|class=available}} 
|-
| {{b|{{#var:Typ}}:}} || {{ic|public|dr|class=available}}
|}
</div>
| class=Bild | {{Bild|{{#var:Öffentlichen Schlüssel importieren--Bild}}|{{#var:Öffentlichen Schlüssel importieren--cap}}||{{#var:Schlüssel importieren}}|{{#var:Authentifizierung}}|{{#var:Schlüssel}}|icon=fa-upload|icon-text=Upload|icon2=fa-close}}
|-
| {{#var:Schlüsselübersicht--desc}} 
| class="Bild" rowspan="2" | {{Bild |  {{#var:Schlüsselübersicht StandortA--Bild}}|{{#var:Schlüsselübersicht StandortA--cap}} }}<br>{{Bild |  {{#var:Schlüsselübersicht StandortB--Bild}}|{{#var:Schlüsselübersicht StandortB--cap}} }}
|-
| 
|}
----

{{h3|{{#var:Standort}} A {{#var:WireGuard Verbindungen erstellen}}|{{Host|{{#var:Standort}} A}} {{#var:WireGuard Verbindungen erstellen}} }}
{| class="sptable2 pd5 zh1 Einrücken"
| class=noborder colspan=4 | {{h4|{{#var:Konfiguration importieren}}|{{Button|{{#var:Schritt}} 1 <small>{{#var:Konfiguration importieren}}</small>|class=aktiv}} }}
|-
| class=noborder colspan=3 | {{#var:Konfiguration importieren--desc}}
| class=Bild | {{Bild|{{#var:Verbindung erstellen Schritt 1--Bild}}|{{Host|{{#var:Standort}} A}} {{#var:Verbindung erstellen Schritt 1--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| class=noborder colspan=4 | {{h4|{{#var:Schnittstelle}}|{{Button|{{#var:Schritt}} 2 <small>{{#var:Schnittstelle}}</small>|class=aktiv}} }}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class=Bild rowspan=8 | {{Bild|{{#var:Verbindung erstellen Schritt 2--Bild}}|{{Host|{{#var:Standort}} A}} {{#var:Verbindung erstellen Schritt 2--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Name}}:}} || {{ic|wg-{{#var:Standort}}A|class=available}} || {{#var:S2-Name--desc}}
|-
| {{b|IPv4 {{#var:Adresse}}:}} || {{ic|10.0.1.1|rechts|icon=/24 |iconw=x|class=available}} || {{#var:S2-IPv4 Adresse--desc}} 10.0.1.0/24)
|-
| {{b|IPv6 {{#var:Adresse}}:}} || {{ic|fd00:0:0:0::1|rechts|icon=/64 |iconw=x|class=available}} || {{#var:S2-IPv6 Adresse--desc}} fd00:0:0:0::0/64)
|-
| {{b|Listening Port:}} || {{ic|51820|c|class=mw6}} || {{#var:S2-Listening Port--desc}}
|-
| rowspan=2 | {{b|{{#var:Privater Schlüssel}}:}} || {{Button|{{#var:Aus Schlüsseln wählen}}|class=aktiv}} || {{#var:S2-Privater Schlüssel--desc}}
|-
| {{Button|WireGuard-Key-{{#var:Standort}}A|dr|class=available}} || {{#var:S2-Privater Schlüssel--desc2}}{{info|{{#var:S2-Privater Schlüssel--info}} }}
|-
| {{b|{{#var:Servernetzwerke global freigeben}}:}} || {{ic|{{cb|10.1.0.0/16}}{{cb|fd00:a:0:0::/64}}|cb|class=available}} || {{#var:S2-Servernetzwerke global freigeben--desc}}
|- class="Leerzeile"
|
|-
| class=noborder colspan=4 | {{h4|Peer|{{Button|{{#var:Schritt}} 3 <small>Peer</small>|class=aktiv}} }}
|-
| {{b|{{#var:Name}}:}} || {{ic|wg-PeerB|class=available}} || {{#var:S3-Name--desc}}
| class=Bild rowspan=9 | {{Bild|{{#var:Verbindung erstellen Schritt 3--Bild}}|{{Host|{{#var:Standort}} A}} {{#var:Verbindung erstellen Schritt 3--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Peernetzwerke freigeben}}:}} || {{ic|{{cb|10.2.0.0/16}}{{cb|fd00:b:0:0::/64}}|cb|class=available}} || {{#var:S3-Peernetzwerke freigeben--desc}}
|-
| {{b|{{#var:Endpunkt}}:}} || {{ic|b.vpn.anyideas.de|class=available}} || {{#var:S3-Endpunkt--desc}} B)
|-
| {{b|{{#var:Endpunkt}} Port:}} || {{ic|51820|c|class=mw6}} || {{#var:S3-Endpunkt Port--desc}} B)
|-
| rowspan=2 | {{b|{{#var:Öffentlicher Schlüssel}}:}} || {{Button|{{#var:Aus Schlüsseln wählen}}|class=aktiv}} || rowspan=2 | {{#var:S3-Öffentlicher Schlüssel--desc}}
|-
| {{Button|WireGuard-Key-{{#var:Standort}}B|dr|class=mw12}}
|-
| {{b|Pre-Shared Key:}} || {{ic|●●●●●●●●●●●●●●●●●|class=available}} || {{#var:Pre-Shared Key--desc}}<li class="list--element__alert list--element__warning">{{#var:Pre-Shared Key--Hinweis}}</li>
|-
| {{b|Keepalive:}} || {{ButtonAn|{{#var:ein}} }} {{ic|25|c|class=mw8}} {{#var:Sekunden}} || {{#var:Keepalive--desc}}
|- class="Leerzeile"
|
|-
| class=noborder colspan=4 | {{h4|{{#var:Erweiterte Einstellungen}}|{{Button|{{#var:Schritt}} 4 <small>{{#var:Erweiterte Einstellungen}}</small>|class=aktiv}} }}
|-
| {{b|{{#var:Routen zu den Netzwerken des Peers erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Routen zu Peers erstellen--desc}}
| class=Bild rowspan=8 | {{Bild|{{#var:Verbindung erstellen Schritt 4--Bild}}|{{Host|{{#var:Standort}} A}} {{#var:Verbindung erstellen Schritt 4--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Zonen erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Zonen erstellen--desc}}
|-
| {{b|{{#var:Zonenname}}:}} || {{ic|wireguard-wg0|class=available}} || {{#var:S4-Zonenname--desc}}
|-
| {{b|{{#var:Netzwerkobjekte für den Peer erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || rowspan=2 | {{#var:Netzwerkobjekte für den Peer erstellen--desc}}
|-
| {{b|{{#var:Netzwerkobjekte für den Peer}}:}} || {{ic|{{cb|wg-net-wg-PeerB}}{{cb|wg-net6-wg-PeerB}}|cb|class=available}}
|-
| {{b|{{#var:Netzwerkgruppe}}:}} || {{ic|wg0-network|tr-odd|class=available}} || {{#var:Netzwerkgruppe--desc}}
|-
| {{b|{{#var:Regeln zwischen dem Peer und internal-Networks erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Regeln zwischen dem Peer und internal-Networks erstellen--desc}}
|- class="Leerzeile"
|
|}
----

{{h3|{{#var:Standort}} B {{#var:WireGuard Verbindungen erstellen}}|{{Host|{{#var:Standort}} B}} {{#var:WireGuard Verbindungen erstellen}} }}
{| class="sptable2 pd5 zh1 Einrücken"
| class=noborder colspan=4 | {{h4|{{#var:Konfiguration importieren}}|{{Button|{{#var:Schritt}} 1 <small>{{#var:Konfiguration importieren}}</small>|class=aktiv}} }}
|-
| class=noborder colspan=3 | {{#var:Konfiguration importieren--desc}}
| class=Bild | {{Bild|{{#var:Verbindung erstellen Schritt 1--Bild}}|{{Host|{{#var:Standort}} B}} {{#var:Verbindung erstellen Schritt 1--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| class=noborder colspan=4 | {{h4|{{#var:Schnittstelle}}|{{Button|{{#var:Schritt}} 2 <small>{{#var:Schnittstelle}}</small>|class=aktiv}} }}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class=Bild rowspan=8 | {{Bild|{{#var:Verbindung erstellen Schritt 2B--Bild}}|{{Host|{{#var:Standort}} B}} {{#var:Verbindung erstellen Schritt 2--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Name}}:}} || {{ic|wg-{{#var:Standort}}B|class=available}} || {{#var:S2-Name--desc}}
|-
| {{b|IPv4 {{#var:Adresse}}:}} || {{ic|10.0.1.2|rechts|icon=/24 |iconw=x|class=available}} || {{#var:S2-IPv4 Adresse--desc}} 10.0.1.0/24)<li class="list--element__alert list--element__warning">{{#var:S2S Transfernetz Hinweis}}</li>
|-
| {{b|IPv6 {{#var:Adresse}}:}} || {{ic|fd00:0:0:0::2|rechts|icon=/64 |iconw=x|class=available}} || {{#var:S2-IPv6 Adresse--desc}} fd00:0:0:0::0/64)
|-
| {{b|Listening Port:}} || {{ic|51820|c|class=mw6}} || {{#var:S2-Listening Port--desc}}
|-
| {{b|{{#var:Privater Schlüssel}}:}} || {{Button|{{#var:Aus Schlüsseln wählen}}|class=aktiv}} || {{#var:S2-Privater Schlüssel--desc}}
|-
| {{b|{{#var:Servernetzwerke global freigeben}}:}} || {{ic|{{cb|10.2.0.0/16}}{{cb|fd00:b:0:0::0/64}}|cb|class=available}} || {{#var:S2-Servernetzwerke global freigeben--desc}}
|- class="Leerzeile"
|
|-
| class=noborder colspan=4 | {{h4|Peer|{{Button|{{#var:Schritt}} 3 <small>Peer</small>|class=aktiv}} }}
|-
| {{b|{{#var:Name}}:}} || {{ic|wg-PeerA|class=available}} || {{#var:S3-Name--desc}}
| class=Bild rowspan=9 | {{Bild|{{#var:Verbindung erstellen Schritt 3B--Bild}}|{{Host|{{#var:Standort}} B}} {{#var:Verbindung erstellen Schritt 3--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Peernetzwerke freigeben}}:}} || {{ic|{{cb|10.1.0.0/16}}{{cb|fd00:a:0:0::/64}}|cb|class=available}} || {{#var:S3-Peernetzwerke freigeben--desc}}
|-
| {{b|{{#var:Endpunkt}}:}} || {{ic|a.vpn.anyideas.de|class=available}} || {{#var:S3-Endpunkt--desc}} A)
|-
| {{b|{{#var:Endpunkt}} Port:}} || {{ic|51820|c|class=mw6}} || {{#var:S3-Endpunkt Port--desc}} A)
|-
| rowspan=2 | {{b|{{#var:Öffentlicher Schlüssel}}:}} || {{Button|{{#var:Aus Schlüsseln wählen}}|class=aktiv}} || rowspan=2 | {{#var:S3B-Öffentlicher Schlüssel--desc}}
|-
| {{Button|WireGuard-Key-{{#var:Standort}}A|dr|class=mw12}}
|-
| {{b|Pre-Shared Key:}} || {{ic|●●●●●●●●●●●●●●●●●|class=available}} || {{#var:Pre-Shared Key--desc}}<li class="list--element__alert list--element__warning">{{#var:Pre-Shared Key einfügen--Hinweis}}</li>
|-
| {{b|Keepalive:}} || {{ButtonAn|{{#var:ein}} }} {{ic|25|c|class=mw8}} {{#var:Sekunden}} || {{#var:Keepalive--desc}}
|- class="Leerzeile"
|
|-
| class=noborder colspan=4 | {{h4|{{#var:Erweiterte Einstellungen}}|{{Button|{{#var:Schritt}} 4 <small>{{#var:Erweiterte Einstellungen}}</small>|class=aktiv}} }}
|-
| {{b|{{#var:Routen zu den Netzwerken des Peers erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Routen zu Peers erstellen--desc}}
| class=Bild rowspan=8 | {{Bild|{{#var:Verbindung erstellen Schritt 4B--Bild}}|{{Host|{{#var:Standort}} B}} {{#var:Verbindung erstellen Schritt 4--cap}}||{{#var:WireGuard Verbindung hinzufügen}}|VPN|WireGuard}}
|-
| {{b|{{#var:Zonen erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Zonen erstellen--desc}}
|-
| {{b|{{#var:Zonenname}}:}} || {{ic|wireguard-wg0|class=available}} || {{#var:S4-Zonenname--desc}}
|-
| {{b|{{#var:Netzwerkobjekte für den Peer erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || rowspan=2 | {{#var:Netzwerkobjekte für den Peer erstellen--desc}}
|-
| {{b|{{#var:Netzwerkobjekte für den Peer}}:}} || {{ic|{{cb|wg-net-wg-PeerA}}{{cb|wg-net6-wg-PeerA}}|cb|class=available}}
|-
| {{b|{{#var:Netzwerkgruppe}}:}} || {{ic|wg0-network|tr-odd|class=available}} || {{#var:Netzwerkgruppe--desc}}
|-
| {{b|{{#var:Regeln zwischen dem Peer und internal-Networks erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || {{#var:S4-Regeln zwischen dem Peer und internal-Networks erstellen--desc}}
|- class="Leerzeile"
| colspan="3" class=pd0| {{Hinweis-box| {{#var:Any-Regel--Warnung}} | fs__icon=em2}}
|}
----

=== {{#var:E2S-Peer einrichten}} ===
{{h4|{{#var:Peer auf UTM hinzufügen}}|{{Host|{{#var:Standort}} A}} {{#var:Peer auf UTM hinzufügen}} }}
{| class="sptable2 pd5 zh1 Einrücken"
| class=noborder colspan=4 | {{#var:E2S-Peer einrichten--desc}}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class=Bild rowspan=16 | {{Bild|{{#var:E2S-Peer erstellen--Bild}}|{{#var:E2S-Peer erstellen--cap}}||{{#var:WireGuard Peer hinzufügen}}|VPN|WireGuard|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
|-
| {{b|{{#var:Name}}:}} || {{ic|wg-Roadwarrior|class=available}} || {{#var:ES2-Name--desc}}
|-
| {{b|{{#var:Peernetzwerke freigeben}}:}} || {{ic|{{cb|10.0.1.201/32}}{{cb|fd00:0:0:0::C9/128}}|cb|class=available}} || {{#var:ES2-Peernetzwerke freigeben--desc}}
|-
| {{b|{{#var:Endpunkt}}:}} || {{ic||class=available}} || {{#var:ES2-Endpunkt--desc}}
|-
| {{b|{{#var:Endpunkt}} Port:}} || {{ic|51820|c|tr-odd|class=mw8}} || {{#var:ES2-Endpunkt Port--desc}}
|-
| rowspan=2 | {{b|{{#var:Öffentlicher Schlüssel}}:}} || {{Button|{{#var:Aus Schlüsseln wählen}}|class=aktiv}} || rowspan=2 | {{#var:ES2-Öffentlicher Schlüssel--desc}}
|-
| {{Button|WireGuard-Key-Roadwarrior|dr|class=available}}
|-
| {{b|Pre-Shared Key:}} || {{ic|●●●●●●●●●●●●●●●●●|class=available}} || {{#var:Pre-Shared Key--desc}}<li class="list--element__alert list--element__warning">{{#var:Pre-Shared Key--Hinweis}}</li>
|-
| {{b|Keepalive:}} || {{ButtonAn|{{#var:ein}} }} {{ic|25|c|class=mw8}} {{#var:Sekunden}} || {{#var:Keepalive--desc}}
|- class="Leerzeile"
|
|-
| {{b|{{#var:Routen zu den Netzwerken des Peers}}:}} || {{ButtonAus|{{#var:nein}} }} || {{#var:E2S-Routen zu den Netzwerken des Peers--desc}}
|- class="Leerzeile"
|
|-
| {{b|{{#var:Netzwerkobjekte für den Peer erstellen}}:}} || {{ButtonAn|{{#var:ja}} }} || rowspan=2 | {{#var:E2S-Netzwerkobjekte für den Peer erstellen--desc}}
|-
| {{b|{{#var:Netzwerkobjekte für den Peer}}:}} || {{ic|{{cb|wg-net-wg-Roadwarrior}}{{cb|wg-net6-wg-Roadwarrior}}|cb|class=available}}
|-
| {{b|{{#var:Netzwerkgruppe}}:}} || {{ic|wg0-networks|dr|class=available}} || {{#var:Netzwerkgruppe--desc}}
|- class="Leerzeile"
|
|- class=noborder
| colspan=4 | {{h4| {{#var:Client-Konfig}} | {{Host|WireGuard Client}} {{#var:Client-Konfig}} }}
<p>{{#var:Manuelle Konfigurationsdatei}}
<li class="list--element__alert list--element__hint">{{#var:Manuelle Konfigurationsdatei--Hinweis}}</li>
</p>
|- class=noborder
| colspan="3" | {{c|[Interface]|#24799a;|fw=bold}}
|-
| {{c|PrivateKey &#61;|pink|fw=bold}} || {{ic|qOPTkQMco1TPd....hsFI<nowiki>=</nowiki>|class=available}}  || {{#var:Client-PrivateKey--desc}}
| class="Bild" rowspan="12" | 
{{code|1=[Interface]
PrivateKey &#61; # ''{{#var:PrivatKey des RW}}''
Address &#61; # ''{{#var:Client-Address--desc}}''
DNS &#61;  # ''{{#var:IP_des_DNServers}} (optional)'', # ''Search Domain (optional)''
MTU &#61; 1420 # ''(optional)''
ListenPort &#61; 51820 # ''(optional)''<br>
[Peer]
PublicKey &#61; # ''{{#var:PublicKey der UTM}}''
PresharedKey &#61; # ''PresharedKey''
AllowedIPs &#61; # ''{{#var:Client-AllowedIPs--desc}}''
Endpoint &#61; # ''{{#var:Endpoint--desc}}''
persistentkeepalive &#61; # ''(optional)''
|class=inline-block}}
{{#var:Aufbau einer WireGuard-Konfigurationsdatei}}
|-
| {{c|Address &#61;|pink|fw=bold}} || {{ic|{{c|10.0.1.201|blau}}/32|class=available}} || {{#var:Client-Address--desc}}
|-
| {{c|DNS &#61;|pink|fw=bold}} || {{ic|{{c|10.1.0.33|blau}}|class=available}} || {{#var:Client-DNS--desc}}
|-
| {{c|MTU &#61;|pink|fw=bold}} || {{ic|{{c|1420|blau}}|class=available}} || {{#var:Client-MTU--desc}}
|-
| {{c|ListenPort &#61;|pink|fw=bold}} || {{ic|{{c|51820|blau}}|class=available}} || {{#var:Client-ListenPort--desc}}
|- class="noborder"
| colspan="3" | <br>{{c|[Peer]|#24799a;|fw=bold}} || 
|-
| {{c|PublicKey &#61;|pink|fw=bold}} || {{ic|beN9ikz… …Do<nowiki>=</nowiki>|class=available}} || {{#var:Client-PublicKey--desc}}
|-
| {{c|PresharedKey &#61;|pink|fw=bold}} || {{ic|29… …/Wipaxs<nowiki>=</nowiki>|class=available}} || {{#var:Client-PresharedKey--desc}}
|-
| {{c|AllowedIPs &#61;|pink|fw=bold}} || {{ic|{{c|10.1.0.0|blau}}/16|class=available}} || {{#var:Client-AllowedIPs--desc}}
|- 
| {{c|Endpoint &#61;|pink|fw=bold}} || {{ic|{{c|a.vpn.anyideas.de|blau}}:51820|class=available}} || {{#var:Endpoint--desc}}
|- 
| {{c|persistentkeepalive &#61;|pink|fw=bold}} || {{ic|{{c|25|blau}}|class=available}} || Keepalive
|- class="Leerzeile"
| colspan="3" | {{#var:Aufbau einer WireGuard-Konfigurationsdatei--desc}}
|}