WIREGUARD VPN Server Configuration on Asus Routers [Client VPN]
Вставка
- Опубліковано 28 вер 2024
- Video Chapters:
0:07 Introduction
1:42 What is WireGuard?
2:47 How to Setup?
In this video I'm going to configure my Asus RT-AX86U wireless router as a Wireguard VPN Server!
I hope you like this video :-)
►Supported models for WireGuard:
asus.click/vpn...
#wireguard #vpn #vpnserver #asus #router
Wireless Routers used in this video:
►ASUS RT-AX86U
US: amzn.to/3dv3V4Y
UK: amzn.to/3oQTZIV
Disclosures:
This video description contains affiliate links which means as an Amazon Associate I earn from qualifying purchases (at no extra cost to buyer). This will help my channel, so thank you if you decide to use my links!
#CommissionsEarned
Related KB videos:
►[KB Ep 07] How to connect a Wireless Router?
• How to connect a Wirel...
►[KB Ep 08] Basic Setup for ASUS Wireless Router [RT-AX86U]
• Basic Setup for ASUS W...
►[KB Ep 09] How to connect an ASUS AiMesh Node?
• How to connect an ASUS...
Other related videos:
►ASUS RT-AX86U Good or Bad? [Speed, Range & ... ]
• ASUS RT-AX86U Good or ...
►ASUS RT-AX86U - One Year Later!
• ASUS RT-AX86U - One Ye...
►Best High-end Wireless Routers 2021 [In my opinion]
• Best High-end Wireless...
If you enjoy my content, please consider supporting my channel!
PayPal Donations : www.paypal.me/...
Patreon : / behfor
My Amazon picks (my affiliate links): www.amazon.com...
Disclaimer:
This video is for educational purposes only. The information in this video should not be considered complete, up to date, and is not intended to be used in place of a visit, consultation, or advice of a legal, medical, or any other professional. You alone assume the sole responsibility of evaluating the merits and risks associated with the use of any information in this video before making any decisions based on such information or other Content. I do not accept any responsibility or liability for any loss or damage of whatever nature (direct, indirect, consequential, or other) which may arise as a result of your use of the information in this video.
I followed your step by step instructions on my Asus XT8 router and scanned the QR code on my iPhone 12 and it created a tunnel but my ip address did not change. Asus offers a lot of options that do not work. Appreciate your video. It’s much better than the instructions on the Asus website.
me too, any luck fixing this?
nevermind got it working buy opening wireguard port and changing dns setting on the wireguard app, although I still cant access internal services.
@@Dion-qe7uocan you teach me that?
I did all of this and it would not work. Maybe do a video on trouble shooting.
I might be the only one who appreciates that you used OnePlus One as a phone showing the wireguard functionality :D Bring back good old memories.
Haha thanks for noticing :-)
Would like so see more videos on VPNs, especially the site to site VPN you mentioned.
Thanks once again Behfor, binge watching your content in 2020 made me want to study the Networking field which I am currently doing now in a professional and educational setting. Thank you once again
Thanks for watching and supporting the channel Sultan 😀 sure thing, I'll definitely make a video about site-to-site VPN. Good luck in your studies 👍
I find your vpn videos to be quite helpful and informative.
Glad to hear that, thanks 👍
@@Behfor If I had some suggestion, it would be a video on accessing network resources behind a remote ASUS router over VPN. Specifically, any PCs, NASs, security camera, etc behind the router from a remote connection.
I know you spoke about the "TAP" mode, which works for this use case, but OpenVPN discourages "TAP" mode over "TUN" and the Apple iOS only supports "TUN". I read you are supposed to use "static routes" to access network resources when using "TUN" mode, but never quite got it to work.
Sure , Hope to see more videos about this.
Thanks 🙏
Thank you sir, I am having a hell of a time initiating Wireguard. So, I will follow your advise here I subscribed
Thanks and good luck!
How do we solve the Notice: For iOS users, you must assign a specific DNS server to WireGuard app before accessing the internet through WireGuard Server. Please help. Thank you.
Just so cool the fact Asus allows native WireGuard integration, it's pretty clear now Asus is the brand to go to for networking nerds like me
On my TP-Link router I don't even have native VPN integration, on the supposed flagship Deco M9+. I have similar WireGuard setup but accomplished via a Raspberry Pi 4 as the server. Regardless WireGuard is really cool
Thanks for sharing 👍
I have one interesting scenario, how to use VPN Client and Server on Asus router in the same time?
love the work you put into every video you make. even the simplest drawing you use is easily understood by everyone. you go into detail of every setting as well. keep up the great work.
Good job, always good job!!!
Thank you so much 😀
Welcome back 🙂
Thanks Ben :-)
You're the best.
You're the best.
Hello, Thank you for your video it made the process easy to setup. Unfortunately the ip address appears to have stayed the same. Is there a setting that I should check?
Hello, I appreciated very well your explanations and If I've undertood well, Wireguard is dedicated to connect a server and a client securely through the internet. I wanted to use it to surf on the internet and that is not possible, right? Therefore, OpenVPN is the only option and I've to accept a loss in speed from 1Gbps to around 300Mbps when connected through the OpenVPN. My router is an Asus AX6000.
Thanks for your comment! You’ve got it mostly right. WireGuard is indeed great for secure connections between a server and a client, but it can also be used for general internet browsing through a VPN. While WireGuard tends to offer better speeds, OpenVPN has wider device support and more configuration options.
@@Behfor Hi, is there any step by step explanation of how to set a Wireguard connection for Internet browsing? Are you going to make such a video in the near future ? Thank you. Cheers.
What's the catch here man Ive seen 3 of the same videos mine doesn't have the VPN client but I checked the specs and it said it had it, is mine not updated or something my vpn taps looks like yours
Before purchasing, I checked the Asus TUF-AX6000 and saw the WireGuard server in its specifications. The GT-AX6000 seems to be the exact same hardware, just with double the RAM, so I decided to buy it. However, it appears that GT does not support WireGuard. At least you can't create a new VPN profile based on WireGuard. Can it be updated/added/installed on GT-AX6000?
On the client side, are you able to set up wireguard on their router and be able to connect to the server. I would like to stream my own content to a TV while I am away from home. But the smart TV doesn''t allow 3rd party apps. I would have to connect to the remote router and route traffic to the VPN back home.
Will it work if ASUS router is behind CGNAT?
I have asus as second router. Behind provider router. Maybe this can be your next video. Configuration and vpn.
There are some steps you went right over like the exporting to the computer. There is some steps that could easily be gone over in more depth for new users. Just my opinion, great video though.
I really like your UA-cam channel. Always getting like from me.
Question and favor.
Is anyway you could go over wireguard manager Merlin script, how to set vpn on it , etc please
I followed all steps and have successfully setup WireGuard on my Asus RT AX88U, however I’m not sure if it’s working properly. While connected to the VPN my internal IP changes, however my public IP remains the same. Is that how it’s supposed to work?
How is this different than vpn fusion?
WireGuard is a VPN Protocol but VPN Fusion is not a VPN protocol like WireGuard but a feature for managing how your network handles VPNs. You can use VPN Fusion to combine different VPN protocols (including WireGuard, OpenVPN, etc.) on different devices within your network.
Great video again, do you have a video on how to set up WireGuard VPN Client in VPN Fusion on the Asus RT - AX86U router ?
Thanks, no not yet
Great vid Buddy, i am a competitive Apex Legends Player on Ps5 from Germany, i have every Seconds round Server issues because of Telekom and apex Server Connection. The only way to Stop that is with a VPN, i buyed the Asus RT-AXE7800 to get the VPN. But now, i dont understand, who can i get the right "Server" from NordVPN into my Asus Router?
Nice video, easy to follow the setup process, but the IP address doesn't change on my Mac running OS Ventura. Asked ASUS, they know zero.
So how would I add Private internet Access as a wireguard protocol instead of OpenVPN? -.-
Does it require to set up port forwarding at the ISP router?
Why have I payed for VPN services to see TV and Netflix etc when traveling! Have had an RX56 asus router for 2-3 years..
This means I surf out from my home gateway so Netflix thinks I am at home?
Yup!
Sir , i have a problem when i connect to my wireguard server on my home router, from external wifi in cafe or with 4g , and check ip on what's my ip than its showing my home network public ip , shouldn't it be showing that 10.something as public ip ?
No it's working as it should you're now tunneled to your local internet connection to your house. To the greater internet your device is now flowing traffic through your router at home
Yes as Sultan has perfectly mentioned here, it's working as it should because when you search "what is my ip" in Google, it'll show you your public IP, which now has changed to your home Public IP address. That 10.a.a.a is the private address which is given to the VPN interface of your client device. Thanks.
Nice video. I was searching for good routers and opted for Asus due to its functionality. I purchased three AX58U routers, placing each in a different house with separate ISPs. I intend to establish a Site-to-Site VPN using WireGuard. I choose WireGuard because one of the routers has an external HDD connected for SMB/FTP, which cannot be utilized over OpenVPN. However, I'm uncertain about the others. I haven't come across any videos on setting up Site-to-Site VPN with ASUS routers. Do you have any suggestions or ideas?
have you looked into mesh?
I was follow the steps carefully but when i connect from my devices it shows my real ip address... Any help? (RT-AX88U)
what about if you go to ipleak dot net?
@@Behfor same thing. I gives me back my original ip...
@@Behfor same here, unfortunately I don't know how to use the uploaded cfg file... I think that might have to do with it
3:30 have no WireGuard VPN in VPN section
A really great movie. However, in my opinion, WireGuard has a serious flaw. When the client computer connecting to the WireGuard VPN server does not have access to network resources (NAS network drive, SQL server, etc.). With OpenVPN this problem does not occur. The computer sees the entire network environment (NAS , SQL server, etc.). After connecting to WireGuard VPN, I cannot access the network environment. It is also not possible to connect to the SQL server. If anyone managed to configure this connection, please share your configuration with me. My router is GT-AX11000.
👌👌👌👌👏👏👏👍👍👍
🙂👍🙏
Thank You From... CCNP
Hi, So I setup a wireguard VPN server with my Asus router. Works fine I can connect my phone remotely.
Second I setup VPN fusion , my local machines on wifi is successfully connected to my VPN provider no issues.
Question, same phone which when I am on local wifi at home is able to get the IP of my VPN provider but when I connected it remotely it only connects my to my ISP and not routing the traffic to my paid VPN provider , I know I can connect to it directly though I just want to connect to my local home wifi coz I thought it will already route the traffic to my VPN subscription. Anything I missed. Thanks in advance.
Well this shouldn't be called client setup but more like server setup. I though u gonna walk through at the other client page setup.
In computer networking, we have site-to-site VPN and client VPN. This video is exactly about client VPN setup. Thanks.
But why?
What do you mean?
I foolishly ordered this router before calling xfinity. Take notice if you have this terrible ISP. I'm unable to turn the modem/router into a bridge, nor does it allow port forwarding to the asus router. I can't set up a DDNS through the router or do much at all thanks to the inability to change the xfinity gateway settings. I can't login to the gateway, even after factory resetting the modem. It only allows a few changes in the xfinity app. I paid for the stupid xfinity modem/router but xfinity blocking me from logging in, likely to discourage connecting a VPN with an external router. I have spent over 8 hours with this. I hope Amazon will accept the return. I hate xfinity right now, but it's my only choice in my apartment.
I just bought a Asus RT-AX52. Why you use Wireguard instead of the Instant Guard ? Actually, I watched one video showed that Instant Guard is very easy to install and use but it is still not working for me. Any advice? Thank in advance.
Thank you for your video. Is it possible to use VPN function without WAN IP?
Yes, if you're referring to situations where your VPN server is behind NAT, then you should do port forwarding on the upstream router. I have a video on that topic titled 'VPN behind NAT.' If you search through my channel, you should be able to find it. The video is for Open VPN but the information might be helpful. Good luck!
Thank you for your quick reply.@@Behfor
Wow really good but I need u too explain lower cz I have no idea about this vpn
Hello, thanks for the great video, just wondering if it is safe to use wiregaurd to connect my home internet and use ftp to access a hard disk connected to my modem at home?
Yes, it should be fine, the VPN makes it secure. Thanks.
@@Behfor thanks for your prompt reply.
@@Galqxyphone2024 My pleasure !
@@Behfor is it possible to make a video related to DNS setting of the Asus router? Thanks!
I have one query
If my ISP provided ip is not a static one. How my client will know the public ip of my home router which is also wireguard server.
How it will connect??
If you IP is not static, the best solution is to create DDNS address before setting up the VPN server. The ddns address will never change and the client will use that to connect to the server. thanks.
Considering the cpu and ram inside the router. Running wireguard 24*7 is it causing any issue. I mean do you see if any heating or browsing from home.
How does the client device find the Asus Router on the open web? Aren’t you supposed to use a dynamic IP tracker or something? Most ISP don’t give you a static IP.
This short video will answer your question: ua-cam.com/video/kNLwYJ2KCz4/v-deo.html
Looks like you read my mind.
I consider using Wireguard to make VPN connection aince my sister is in China and I am too cheap to let her buy a subscription fee
Glad I could use my super powers and make a video that you were looking for 😁
Sir please make a video on VPN FUSION , the feature on asus routers ... How to set it up and what's its uses ...
Thanks for the suggestion, that's on my list 👍
My ISP blocked DDNS. Any solution to access my router and my home network from mobile Internet would be helpful.
Awesome video. Can you make a site to site vpn connection video with wireguard and openvpn if possible please?
Site to site VPN is on my list, thanks
Great instructional segment,however, here is my situation I have a IPTV box (MAG254) which will not connect to my internet, I get a Error code 1020. I believe it is because my ISP provider is blocking the IPTV's portal address. My thinking is to connect another router(ASUS RT-N12+ N300) with VPN functionality( not sure if it supports openvpn, or can be flashed with DD-WRT )
to my existing router(TP-Link Wireless N Router WR840N model:TL-WR840N) and there by connecting the Mag254 o the VPN.Will my theory work? ThisI would like to do following the example you showed in your video, wirelessly.
Thanks, if the VPN server (2nd router) is in the same physical location as the 1st router and connected to the same ISP (which we assume is blocking your iptv) then unfortunately using a VPN connection is not gonna help! In the video the VPN server is connected to an ISP that doesn't do censoring. Hope that makes sense. Thanks again 🙂
@Behfor Well I did a little experiment tell me why this worked and now stopped. I created a VPN on my laptop(surfshark) and the connected the iptv Mag254 box via Ethernet cable and it worked. But being the perfectionist that I try to be messed around with the buffer settings and then rebooted the IPTV box. It then gave me a "Your STB is blocked. Call the provider." which I did and now awaiting a reset on the unit, but aside from that I cant seem to get the ethernet cable configured with aip address.??? weird any suggestions? I knows it works because I watched TV for over an hour before I messed it up.
Patiently waiting for the video on how to setup WireGuard as a client!
It's really straightforward no configuration needed. Just scan the QR code on mobile devices or import the config file and enable it. That's all
Hey Behfor, unfortunately, people in Iran can't access my Wireguard or Openvpn. But they can ping me. Ports are reachable as well. I don't know what the heck the regime is doing there that's breaking these VPN connections. Any ideas?
Hi, yeah they use deep packet inspection which can block WireGuard! You might wanna take a look at my Persian channel @technolofun, there is a video in Persian regarding a VPN that should work for Iran. Thanks.
Interesting. Thanks for your reply. Definitely stopping by your other channel to check it out that VPN. What's your line of work?
How is this different than using Instant Guard option on the ASUS router?
Wireguard is a VPN protocol, so you can install it pretty much on any Linux-based routers and use it to implement different VPN scenarios. Instant guard on the other hand is just a tool that is made by Asus and allows Client VPN connection between Android/iOS devices and an Asus router. It uses the IPSec VPN protocol and it's not itself a VPN protocol. I will probably make a video about it. Thanks.
Is there way for this to use your local internet but use the tunnel just to access remote devices? Split tunnel. I don't want to go through the remote router to get to the internet.
Which firmware are you using? do you have a link?
Firmware ver is: 3.0.0.4.388_22068-gf3adbcd
great video. I assume you need a fixed IP number in your RT-AX86U to be found by the clients. correct? Thank you
Yes but you may use DDNS in router settings
Not Necessarily, because you can setup a ddns address first, and then setup your VPN server. This way the ddns address will be used instead of the IP address and it will never change. Thanks.
I tried ASUS AX88U wireguard last year. AX88U's CPU performance cannot afford 1000mbps tunnel speed. The peak of SMB transmitting over asus wireguard is 50MB/s which is so slow. Will the next generation of ASUS router come with a real Gb level WireGuard tunnel?
سلطااان لذت بردم از آموزش های خفنت. دمت حسااااابی گرم. همین فرمون برو جلو. تنها دلیلی که ممکنه کم بازدید بگیری بخاطر موضوع ویدیو هاست که مخاطب های حرفه ای تر و نه جامع تر رو جذب میکنه و از نظر من کیفیت ویدیو و آموزش ها هیچ ارتباطی به بازدید نداره و عالی هستن. منتظر میلیونی بازدید خوردنت هستم. موفق باشی
I used your previous video to setup a VPN.
I have 2 Asus AX86U, one of them Wireguard server, and the other one Wireguard client. Everything is working fine but I can't find a killswitch feature on the GUI. how can I make sure that if the server is down, the client router will not be connected to Internet, and leak the IP?
thankyou . it was great. keep it up. thnx
Most welcome 😊
thanks a ton!
You're very welcome !
I have a question, since setting up on Asus router that has public IP we don't need port forwarding, but is that port still open and vunerable to the Internet and if so how to secure it? Also if you are using the port forwarding route, how to secure that using DMZ?
Soooo easy. Thank you so much
You're very welcome!
Hi buddy thx for the vid. Can I use this router to setup wireguard client conf as a open vpnfrom third party vpn. For example anything that connects to this router will directsd to third party vpn
would be nice to see tutorial on cli setup for older versions (ie RT-AC86U) without UI option for wireguard vpn...
Hi behfor I have RT-AX82U have you done a video for best settings for this router yet I’m sorry my question is nothing to do with this video.
Awesome 👏
Thanks 👍🏻
Hi, do you have any suggestions on how to manually go about this? The problem I am facing is that my friend is using a Microtek router and it doesn't provide those config files apparently. And with the ASUS router it doesn't really provide me with a public key to provide to him for the purposes of manually entering all the config information on my end. Any suggestions?
This is what i was searching for .. thanks
Glad I could help 😃
Can ypu please show an asus to asus site to site wireguard setup?
Can i install the configuration file on a VPN router?
Is it possible to use a vpn client only on an guest network?
is it support L2TP VPN protocol?THNX
How to I get my public and private keys?
as shown in the video in the advanced settings!
Be aware that you cannot successfully port forward if running Wireguard client from the router even though you have that setting. It will only work with OpenVPN client. This is of course a bug but nobody knows when Asus will fix it.
I haven't tried that myself but thanks for the heads up!
Why don't you use dd-wrt or openwrt instead of the stock firmware ?
Great video. Exellent explaination of VPN and setup. I am using the Ubiquiti "Wifiman" which uses their server. Works well, They have added Wireguard as an option, as well as the ability to use L2TP
Glad you liked the video and thanks for sharing 😀👍
As always a very nice explanation
Thank you so much Luis 😃👍
Yes please do more VPN senarios such as Asus using ipsec client not server