Add support for WireGuard.

This commit is contained in:
2021-11-22 18:35:58 +01:00
parent 1d2d6a6fae
commit b464b0c039
8 changed files with 310 additions and 0 deletions

View File

@ -536,6 +536,36 @@ declare -A vpn_server_dmz_arr
vpn_local_net_ports="1194"
# ======
# - WireGuard Service
# ======
# - WireGuard Service on Gateway?
# -
local_wg_service=true
wg_gw_ports="$standard_wg_port"
# - WireGuard Services DMZ (reachable also from WAN)
# -
# - wg_server_dmz_arr=[<ip-address>]=<dsl-device>
# -
# - Note:
# - Each extern interface can have only one thuch service
# -
# - wg_server_dmz_arr[192.168.10.1]=$ext_if_dsl_2
# - wg_server_dmz_arr[192.168.10.13]=$ext_if_dsl_1
# -
# - Multiple settins of this parameter is possible
# -
declare -A wg_server_dmz_arr
# - Local WireGuard Ports
# -
# - Blank separated list
# -
wg_local_net_ports="$standard_wg_port"
# ======
# - DHCP Service
# ======
@ -1530,6 +1560,10 @@ allow_samba_requests_out=true
allow_vpn_out=true
vpn_out_ports="1194 1195 1196"
# WireGuard
#
allow_wg_out=true
wg_out_ports="$standard_wg_port"
allow_cisco_vpn_out=true
cisco_vpn_out_ports="$standard_isakmp_port $standard_ipsec_nat_t"