Hi everyone in this video i want to show you how to set up the wireguard vpn on your asus router. I'm going to also show you how to configure a client So to access this wireguard vpn from the internet and to be able to browse the internet from anywhere in the world as if you are on your own home network. Setting up wireguard is very easy and consists of four main steps. The first step is creating a ddns entry. The second step is to configure the wireguard vpn on your router. The third step is to share the configuration file with the clients of this Wireguard vpn. And the fourth and last step is configuring the client. In my example, i'll be using the asus router rt-ax3000 but the instructions i'm going to show you apply also to all Asus Routers that support the wireguard vpn protocol. For routers other then asus routers, if they support the Wireguard vpn protocol, you can simply match the instructions I'm going to show you on my asus router to the instructions that you're gonna find on your router. So let's go to our Asus admin page to start with creating a ddns entry. So this is admin page of my asus router. To create a dynamic dns entry, you need to go to Wan. So it is on the left here, click on it and then click on ddns tab on the top. So here to create a ddns entry you have enable the ddns client click on yes and asus gives you the option to create a ddns entry on their domain and it is a free option for asus which is very good. So if you don't have this option in your router, i have previously created a video on how to create a ddns entry on no-ip for free. So you can check this video in the description below. So here i'm going to leave the server on asus.com and for hostname i'm going to put any name . So put a name that is significant to you. So you know i'm going to put kstech1971 and Asus will also give you a free certificate from let's encrypt. So i advise you to select the free certificate and then click on apply here. And if the registration is successful, you're gonna get this message. So here i'm going to click on ok and you see we have our ddns entry created now. So now let's go to the next step which is configuring the Wireguard vpn on our router. To set up the Wireguard vpn on your router. On the left here scroll until you find you find vpn click on vpn and under vpn server you have Wireguard the last one here. So toggle the switch to on and wait for the router to apply the settings. On the right you have the configurations of the Wireguard vpn. Keep it on general first and the first one is access Intranet. So this will permit the client to access the internet and the intranet when they connect to the wireguard vpn. I'm gonna keep it on access intranet in case you are sharing a usb drive on your router. Or if you want the client to access like devices on your home network keep access intranet enabled and for the ip you can leave it by default. This is the ip that will be distributed to the clients when they connect to the wireguard vpn. And for the listen port you can change it. So here it is 51820 by default, you can put it anywhere from 1024 to 65,535. I'm gonna leave it by default and then you create clients here. Before creating clients i'm gonna go to the advanced settings so that to set it up there. So click on the drop-down list and choose advanced settings. And under advanced settings make sure allow DNS is enabled, enable NAT ipv6 is enabled also and enable pre-shared key. This is an added layer of security. So click on it to toggle it to enable and keep everything else by default and then click on apply settings. So now we still have to create clients. What do clients do is when you create a client each client has its own configuration file. So you give this configuration file to your clients and when they connect, they will connect to the client you're creating here. I'm going to explain the management of wireguard at the end of this video. So make sure to watch this video until the end. So here let's click on the plus sign to create our first client. I'm gonna create a client for my smartphone and a client for my windows 11 pc, for the username here put something that is significant. So i'm going to put here phone and then let's click on the drop-down list. So it will give the client the first ip that is available in the range of ips for the vpn clients. So click on apply and enable. in the screen here is to share the configuration file with your clients. I'm gonna get back to this screen when i configure the client. So for now, i'm just going to click on the x here to close it and i'm going to create another client here for my windows 11 pc. I'm gonna call it win11 and here also click on apply. And let's close this. So now the configuration of Wireguard vpn server is finished. We still need to configure the clients so that they can access this server. I have two clients. As you see, i have my windows 11 pc here and also i have my samsung android phone. So i'm going to show you how to configure both clients, but i'm going to start with the windows 11 PC. So here i'm gonna go back to my asus administration page to copy the configuration file on the usb key. So here i'm going to copy win11 configuration file. Click on the three dots here next to win11, and then here click on this icon and click on export and then click on export here. So let's choose usb key. So to copy the file under the usb key and click on save save. i'm going to keep the file name by default. So now i'm going to take the usb key, insert it in my windows 11 pc, and i'm going to switch to my windows 11 pc to show you how to make the configuration and how to connect to the vpn server. The first step we need to do on our windows 11 pc is to download the wireguard installation file. So open your web browser and go to wireguard.com. And here click on installation, click on the download windows installer here. Of course, if you have another operating system, do this for your operating system. Click on open file after the file is downloaded and then click on yes to install it. So now the file is installed. I already inserted the usb key into my windows 11 pc. And my windows 11 pc, by the way, is connected to an external network that has nothing to do with my home network. So i'm going to click here on add panel so that to add the configuration file, and this is the configuration file selected and then click on open. And all you have to do here is click on activate and the connection will be activated. So now the connection is active. You have to know one thing about Wireguard is that it will tell you that the connection is active even if it couldn't make a connection. And this is something i think that should be fixed with Wireguard in later versions. So now it says that the connection is active. We're going to test if it's active by launching in our web browser whatismyipaddress. And if i get my home network ip address, it means that the connection is active and that i am browsing the internet from anywhere i am connected in the world through my home network connection. So let's open a new tab and go to whatismyip. So here i know that this is my home network ip address. So we connected to the wireguard vpn successfully. So to prove this to you, i'm going to disable the wireguard client. I'm gonna keep this page active and then i'm going to refresh it and you're gonna see that the public ip will change and of course the isp will change. So let's go to the wireguard client and i'm gonna click on deactivate and let's minimize it. And let's go here and refresh this page. You see that all the information changed so the connection was successful. Let me show you now how to set up the wire guard client on your smartphone. I'm going to switch once again to my asus router admin page. So next to phone here, click on the three dots and this time i'm gonna use a qr code. So this is my smartphone. The first thing you need to do on your smartphone is to install the wireguard application. Here i have an android phone and i already opened the play store. I'm going to the search, wireguard, and search for it and tap on install. And when the application is installed, tap on open. So tap on the plus sign on the application and then tap on scan from qr code and tap on while using the app to allow it to scan. So now let's scan the qr code. I'm going to name the connection home. And then tap on create tunnel. So now to activate the connection, all you have to do is to toggle the on/off button to on. Before this, i'm going to show you the ip of the phone and i'm going to show you the ip of the phone after I connect to the tunnel. So to prove to you that you are connected. So let's go to whatismyip and here's my ip before the vpn connection. So let's connect to the vpn now. Tap on Ok, so now the vpn is connected. Let's go back to whatismyip and refresh it. And you'll notice that the ip changed to the ip of my home network. Now what i still want to show you is how to manage the wireguard vpn server on your router. So i'm going to switch once again to my asus router. First. If you want to just stop the vpn for all the clients, all you have to do is turn the switch to off and the vpn will be stopped for all the clients. But if you want to manage the clients one by one for each client, you can do the following. Click on the three dots next to each client. First option is to delete the client completely. So this client will not be able to connect to your vpn anymore. And the second one is if you click here, you can, for instance, click on the arrow here and then it change the key for the client. And this way you will oblige the client to reconfigure the vpn wireguard client with a new configuration file. So all you have to do is click on the renew and it will renew the keys for this client and then click on apply. So this way the client cannot reconnect without re-importing the configuration file and also if you want to change the encryption key for everyone so that everyone will be obliged to go and renew the configuration, what you have to do is click on the drop-down list here on the vpn details and then go to advanced settings and then scroll and click on the renew here. And then of course click on apply all settings and all the clients will be forced to reconfigure their Wireguard vpn client to be able to reconnect. I hope that you liked my video and you found it useful. If you did, please share it, subscribe to my channel and give this video a thumbs up. I will really appreciate it and this will help my channel greatly and this way you will not miss my future videos. I'm Eloy from Knowledge Sharing Tech. I want to thank you all for watching and see you in the next video.
