W&T 55211, Manual

Page: 58 / 114

58
W&T
WireGuard VPN server
7�1 Overview WireGuard VPN Server
WireGuard is a VPN architecture whose focus is on high se-
curity requirements through modern cryptography as well as
simple configuration at high speed.
Details as well as current information on the concept, function
and development status of this open source project can be
found under the following link. There you will also find down-
load options for WireGuard VPN clients of all common opera-
ting systems (Windows, Linux, Android, IOS, MacOS).
https://www.wireguard.com
WireGuard functionality
WireGuard tunnels IP packets through an encrypted UDP
channel between the VPN client and VPN server in a virtual IP
subnet. Encryption and mutual authentication are carried out
asymmetrically using key pairs with public and private parts
(public key/private key). The public keys of a VPN server and
client must be mutually known.
WireGuard Server mode
The microwall provides a WIreGuard server on the LAN side,
on which registered VPN clients can connect and get secure
access to participants of the island network. All connections
to the island network must be explicitly allowed via a white-
list-based firewall.
Application example
External WireGuard clients under Windows, Linux, Android or
IOS build up a VPN tunnel to the Microwall in order to connect
to participants of the island network, e.g. for remote main-
tenance.