UTM/VPN/WireGuard-S2E

{{var | Schlüsselmanagement Schlüssel tauschen | notempty<div class="Hinweis-Container__einblenden color-box-shadow em1 fs__icon__em1 bc__hgrau g}
Mit den Schlüsseln vom Typ x25519 muss noch folgendes getan werden: " ><i class="UTM fal fa-exclamation-triangle g}
Mit den Schlüsseln vom Typ x25519 muss noch folgendes getan werden: em1 pdr2 pdt1 baseline" title="">Diese Schritte sind unnötig, wenn die Schlüsselwerte direkt im Einrichtungsassistenten generiert werden.<i class="UTM fal none g}
Mit den Schlüsseln vom Typ x25519 muss noch folgendes getan werden:

em1 pdl5 pdt1 baseline">

---

---

12.7.1

Zuletzt aktualisiert:

02.2025

12.6.2 12.5.1 12.2.5

' VPN

12.6.2

Zuletzt aktualisiert:

12.2024

12.5.1 12.2.5

' VPN

---

notempty

: v12.6

afficher

			[[Datei: ]]
Name:	x25519-device
	X25519
(PEM) (PEM)			[[Datei: ]]
ED25519/X25519 Export Format: PEM (PEM) (PEM)
			[[Datei: ]]

---

FQDN	a.vpn.anyideas.de	b.vpn.anyideas.de	–
'	10.1.0.0/16	10.2.0.0/16	10.0.1.0/24
'	10.0.1.1/24	10.0.1.2/24	–
'	fd00:a:0:0::0/64	fd00:b:0:0::0/64	fd00:0:0:0::0/64
'	fd00:0:0:0::1/64	fd00:0:0:0::2/64	–

	UTM	Roadwarrior
FQDN	a.vpn.anyideas.de	–	–
'	10.1.0.0/16	–	10.0.1.0/24
'	10.0.1.1/24	10.0.1.201/24	–
'	fd00:a:0:0::0/64	–	fd00:0:0:0::0/64
'	fd00:0:0:0::1/64	fd00:0:0:0::C9/64	–

			[[Datei: ]]
|| ||
		afficher [Interface] Address = 10.0.0.1/24 Address = C0FF::EEEE/64 ListenPort = 51824 PrivateKey = interfacePrivateKeyaaaaaaaaaaaaaaaaaaaaaaaa= [Peer] AllowedIPs = 10.0.0.2/32, 10.0.0.3/32 AllowedIPs = 10.0.0.4/32 Endpoint = 1.2.3.4:51825 PersistentKeepalive = 30 PresharedKey = peerPresharedKeyaaaaaaaaaaaaaaaaaaaaaaaaaaa= PublicKey = peerPublicKeyaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa=
	wg0		[[Datei: ]]
Name:	wg_server
	10.0.1.1/24
	fd00:0:0:0::1/64
	51820
	x25519_a.vpn
|| Peer ||	[[Datei: ]]
Name:		peer-b
		»10.2.0.0/16»fd00:b:0:0::/64
		b.vpn.anyideas.de
		51820
	x25519 b vpn pub pem	? afficher
		afficher
	•••••••••••••••••••••••••••
	25

			[[Datei: ]] [[Datei: ]]
|| Peer ||
(IPv4):
(IPv6):

notempty v12.7.1
			[[Datei: ]]
|| class=mw18 | Peer ||
|| ||

			[[Datei: ]]
afficher ' ' route set id <ID> flags BLACKHOLE_IF_OFFLINE
	wireguard-wg0
	»wg-net-peer_rw»wg-net6-peer_rw
	wg0-network
WireGuard Client
			[[Datei: ]] afficher [Interface] PrivateKey = # PrivatKey für RW Address = # Netz-IP für den Roadwarrior DNS = # IP_DES_DNServers (optional), # Search Domain (optional) MTU = 1420 # (optional) [Peer] PublicKey = # PublicKey derUTM PresharedKey = # PresharedKey AllowedIPs = # ' Endpoint = # ' persistentkeepalive = # (optional)
	sFWO… …LmDM=
' [Interface]
PrivateKey =	uIp… …9E3XA=
Address =	10.0.1.201/32
DNS =	10.0.1.1, beispiel.local
MTU =	1420
ListenPort =	51820
[Peer]
PublicKey =	beN9ikz… …Do=
PresharedKey =	29… …/Wipaxs=
AllowedIPs =	10.1.0.0/16
Endpoint =	a.vpn.anyideas.de:51820
persistentkeepalive =	25	Keepalive

---

---

---

'

---

extc-Variable	Default
CONNECTION_RATE_LIMIT_TCP	0
CONNECTION_RATE_LIMIT_TCP_PORTS
CONNECTION_RATE_LIMIT_UDP	20 / 0 ‍
CONNECTION_RATE_LIMIT_UDP_PORTS		[ 1194 1195 ]

afficher

extc value get application securepoint_firewall spcli extc value get application securepoint_firewall | grep RATE	application |variable |value --------------------+-------------------------------+----- securepoint_firewall |… |… |CONNECTION_RATE_LIMIT_TCP |0 |CONNECTION_RATE_LIMIT_TCP_PORTS| |CONNECTION_RATE_LIMIT_UDP |20 |CONNECTION_RATE_LIMIT_UDP_PORTS|
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP value 20 system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP value 0 system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP_PORTS value [ 443 11115 ] system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP_PORTS value [ ] system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP value 20 system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP value 0 system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP_PORTS value [ 1194 1195 ] system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP_PORTS value [ ] system update rule
extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP value 20 extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_TCP_PORTS value [ 443 11115 ] extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP value 20 extc value set application securepoint_firewall variable CONNECTION_RATE_LIMIT_UDP_PORTS value [ ] system update rule