wg set allowed ip confusion

Jason A. Donenfeld Jason at zx2c4.com
Wed Jan 4 22:15:42 CET 2017


Hi Jens,

One peer, one IP. The routing enforces a 1:1 relationship. So no, you
can't do this. But I sincerely doubt you would even want to do this.

On your server, each peer's allowed IPs should probably be a /32 of
the actual internal IP address of the peer.

The front page of wireguard.io has an illustrative example
configuration of a client-server topology:
https://www.wireguard.io/#cryptokey-routing

Jason


More information about the WireGuard mailing list