OpenWRT Wireguard server

OpenWrt server
https://openwrt.org/docs/guide-user/services/vpn/wireguard/client

opkg update
opkg install wireguard luci-app-wireguard

WG_IF="vpn"
WG_PORT="51820"
WG_ADDR="192.168.9.1/24"

# Generate keys
umask go=
wg genkey | tee wgserver.key | wg pubkey > wgserver.pub
wg genpsk > wgserver.psk
WG_KEY="$(cat wgserver.key)"
WG_PSK="$(cat wgserver.psk)"
WG_PUB="*******[ copy from wg client ]********"

# Configure firewall
uci rename firewall.@zone[0]="lan"
uci rename firewall.@zone[1]="wan"
uci del_list firewall.lan.network="${WG_IF}"
uci add_list firewall.lan.network="${WG_IF}"
uci -q delete firewall.wg
uci set firewall.wg="rule"
uci set firewall.wg.name="Allow-WireGuard"
uci set firewall.wg.src="wan"
uci set firewall.wg.dest_port="${WG_PORT}"
uci set firewall.wg.proto="udp"
uci set firewall.wg.target="ACCEPT"
uci commit firewall
/etc/init.d/firewall restart

# Configure network
uci -q delete network.${WG_IF}
uci set network.${WG_IF}="interface"
uci set network.${WG_IF}.proto="wireguard"
uci set network.${WG_IF}.private_key="${WG_KEY}"
uci set network.${WG_IF}.listen_port="${WG_PORT}"
uci add_list network.${WG_IF}.addresses="${WG_ADDR}"
uci add_list network.${WG_IF}.addresses="${WG_ADDR6}"

# Add VPN peers
uci -q delete network.wgclient
uci set network.wgclient="wireguard_${WG_IF}"
uci set network.wgclient.public_key="${WG_PUB}"
uci set network.wgclient.preshared_key="${WG_PSK}"
uci add_list network.wgclient.allowed_ips="${WG_ADDR%.*}.2/32"
uci add_list network.wgclient.allowed_ips="${WG_ADDR6%:*}:2/128"
uci commit network
/etc/init.d/network restart

OpenWrt client
https://openwrt.org/docs/guide-user/services/vpn/wireguard/client

OpenWRT

Supported devices
https://openwrt.org/toh/start

Update

opkg -verbosity=0 update
for PKG in $(opkg list-upgradable | cut -d" " -f1 | grep -v Multiple); do
    opkg upgrade ${PKG}
done

factory reset
https://openwrt.org/docs/guide-user/troubleshooting/failsafe_and_factory_reset

firstboot -y && reboot

FRITZ!Box 3490
https://boxmatrix.info/wiki/FRITZ!Box_3490
https://forum.openwrt.org/t/port-to-avm-fritz-box-3490/52692/77
http://www.aboehler.at/doku/doku.php/projects:fritz3490

FRITZ!Box 7360
https://boxmatrix.info/wiki/FRITZ!Box_Fon_WLAN_7360_v2
https://openwrt.org/toh/avm/avm_fritz_box_7360_v2

# update firmware
ssh 192.168.1.1
URL=http://downloads.openwrt.org/snapshots/targets/lantiq/xrx200/openwrt-lantiq-xrx200-avm_fritz7360-v2-squashfs-sysupgrade.bin
wget ${URL} -P /tmp
scp /tmp/openwrt-lantiq-xrx200-avm_fritz7360-v2-squashfs-sysupgrade.bin 192.168.1.1:/tmp/
ssh root@192.168.1.1
echo 3 > /proc/sys/vm/drop_caches
mtd -r write /tmp/openwrt-lantiq-xrx200-avm_fritz7360-v2-squashfs-sysupgrade.bin firmware

# from stock firmware
wget http://downloads.openwrt.org/snapshots/targets/lantiq/xrx200/openwrt-lantiq-xrx200-avm_fritz7360-v2-squashfs-sysupgrade.bin -P /tmp

Set your client IP to 192.168.178.2
Power on your your Fritzbox and connect to 192.168.178.1 via ftp in the first 5 seconds.

cd /tmp
ftp 192.168.178.1
login with adam2/adam2
type into the ftp prompt:
passive
binary
debug 1
quote MEDIA FLSH
put openwrt-lantiq-xrx200-avm_fritz7360-v2-squashfs-sysupgrade.bin mtd1

Crosscompile OpenWRT

[embed_url: https://raw.githubusercontent.com/panticz/lyc/master/scripts/compile_openwrt_ar9132.sh]

Compile for x86

sudo apt-get install -y --force-yes subversion libncurses5-dev libghc6-zlib-dev flex build-essential
cd /tmp
svn checkout svn://svn.openwrt.org/openwrt/trunk
make menuconfig

Links
http://wiki.openwrt.org/doc/howto/build
http://wiki.openwrt.org/doc/devel/crosscompile
http://wiki.openwrt.org/doc/howto/buildroot.exigence
http://www.ffnn.nl/pages/articles/linux/cgi-scripting-tips-for-bash-or-sh.php

openwrt