Router With Wireguard VPN

[ecs]

I'm looking for a way of accessing my Wireguard VPN without having to have the client installed on individual devices. I have an ISP provided router which doesn't really have many features on it (and I would like the VPN network to have a separate SSID so I can choose which deivices connect to it). I have to use the ISP router so changing that to something with more features is unfortunately not an option.

Can anyone recommend a WiFi router which can connect to a Wireguard VPN and be used in gateway mode so that I can just plug it into the ISP router?

[megaphone]

You can run a Wiregaurd VPN server on a Raspberry Pi,

https://www.youtube.com/watch?v=Q4zlrc0F4NU

[Funk]

My FritzBox 7530 has it built-in: https://en.avm.de/products/fritzbox/fritzbox-7530/

"Encrypted communication via VPN

With the modern WireGuard protocol and the proven IPSec standard, you can establish a secure connection to your FRITZ!Box via VPN or connect several FRITZ!Box networks with each other. The settings can be carried out directly in the FRITZ!Box and quickly transferred to smartphones, tablets and computers."

Really neat feature.

[Trustmeimadoctor]

do you need wifi in the router? and have less than 1 gig internet

https://uk.store.ui.com/uk/en/category/all-unifi-c...

dont need wifi or camera nvr built in

https://uk.store.ui.com/uk/en/category/all-unifi-c...

dont need wifi but want an nvr
https://uk.store.ui.com/uk/en/category/cloud-gatew...

Edited by Trustmeimadoctor on Thursday 3rd October 15:19

[superpp]

I have a Wireguard server running on my Raspberry Pi.
I use this little travel router with Wireguard client setup (£34 on Amazon with the voucher)
https://www.amazon.co.uk/GL-iNet-GL-SFT1200-Wirele...

It even has a little switch on the side to turn the VPN on or off.
Use it to access my network drive and defeat geolocks on streaming whilst away. Also offers protection on hotel wifi etc..

Edited by superpp on Thursday 3rd October 15:30

[ecs]

I'm using Wirguard on Raspberry Pi too and hat little GL.iNet router looks like what I need - something to access my UK network while travelling.

Thanks for the sugestion!

[GlenMH]

megaphone said:

You can run a Wiregaurd VPN server on a Raspberry Pi,

https://www.youtube.com/watch?v=Q4zlrc0F4NU

My Asus router will run a wireguard client - instructions are here: https://www.asus.com/support/faq/1048282/

On the above: can't you route all traffic via a pi running the client? Put the pi between the modem and the router and all the traffic should be encrypted.

Edited by GlenMH on Thursday 3rd October 17:03

[TonyRPH]

I'd go for a MikroTik - excellent routers, but they are Ethernet only, so if using ADSL / VDSL a modem is required (which would be required with a Pi as well).

[Somebody]

OP, I do exactly as you intend to by piggybacking a gl-inet AR300 (and also a MT300) running VPN to my main router.

Here's the admin GUI:

Edited by Somebody on Thursday 3rd October 18:03

[megaphone]

ecs said:

I'm using Wirguard on Raspberry Pi too and hat little GL.iNet router looks like what I need - something to access my UK network while travelling.

Thanks for the sugestion!

So just use the Pi to access your network via the VPN.

[wombleh]

If the ISP router is that basic then might not be able to forward traffic very easily, although could use something like miniupnp to fudge it.

Draytek stuff supports wireguard. Pricy but great kit and lasts ages, think mine may well be 15 years old now and they’re still providing updates for it.

[GlenMH]

wombleh said:

Draytek stuff supports wireguard. Pricy but great kit and lasts ages, think mine may well be 15 years old now and they’re still providing updates for it.

After recent news about security holes, they need to

[ecs]

Somebody said:

OP, I do exactly as you intend to by piggybacking a gl-inet AR300 (and also a MT300) running VPN to my main router.

Here's the admin GUI:

Edited by Somebody on Thursday 3rd October 18:03

This looks ideal - I like that I can use this via ethernet or WiFi in between my home (or hotel e.t.c.) network and run the VPN client directly on it.

Thanks for the suggestion on this, I've got one on order

(To those who keep suggesting, I have the VPN server installed on the Pi sitting on the network I want to connect to. I need something to run the VPN client on as I've got devices which I can't directly install Wireguard client onto).

[Griffith4ever]

My Asus RT-AX86S supports wireguard. Its an excellent router. I use open VPN on it and it works a treat.

[biggiles]

megaphone said:

ecs said:

I'm using Wirguard on Raspberry Pi too and hat little GL.iNet router looks like what I need - something to access my UK network while travelling.

Thanks for the sugestion!

So just use the Pi to access your network via the VPN.

Exactly this, I don't think you need a second device with Wireguard on it? One is sufficient for the network (perhaps 2 for redundancy if critical).

Similarly to Wireguard, I have a single device with Tailscale on it, I can access everything remotely through it.

[wombleh]

GlenMH said:

wombleh said:

Draytek stuff supports wireguard. Pricy but great kit and lasts ages, think mine may well be 15 years old now and they’re still providing updates for it.

After recent news about security holes, they need to

In the last year there's been critical remote vulns in VPN for Palo, Fortigate, Ivanti, Cisco, Asus, TPLink, plus a few others whose names I forget. At least Draytek offer patches for EOL devices, not sure many others did that.

Shows the importance of patching it, whatever vendor you end up with !