WireGuard で拠点間やリモート接続用の VPN を構成する例です。
複数拠点をフルメッシュで自動接続する Mesh VPN は、管理画面の Mesh VPN から作成・管理できます（推奨）。VPN グループにルーターを追加するだけで、各拠点の鍵交換と経路が自動的に構成されます。
このページでは、コンフィグで WireGuard のピアを手動で指定する構成例を示します。
wg（VPN 名は最大 4 文字）{
"version": "1.0",
"network": {
"wan": { "wan0": { "ipv4": [{ "mode": "dhcp" }], "ipv6": [{ "mode": "disabled" }] } },
"lan": {
"lan0": {
"default": true,
"ipv4": { "mode": "static", "address": "192.168.0.1/24" },
"dhcp": { "enabled": true, "rangeStart": "192.168.0.100", "rangeEnd": "192.168.0.150", "leaseTime": "12h" }
}
},
"ports": {
"sfp0": { "mode": "access", "network": "wan0" },
"eth0": { "mode": "access", "network": "lan0" },
"eth1": { "mode": "access", "network": "lan0" },
"eth2": { "mode": "access", "network": "lan0" },
"eth3": { "mode": "access", "network": "lan0" }
},
"vpn": {
"wg": {
"type": "wireguard",
"displayName": "拠点間 WireGuard",
"wireguard": {
"privateKey": "REPLACE_WITH_PRIVATE_KEY",
"listenPort": 51820,
"addresses": ["10.0.0.1/24"],
"peers": [
{
"publicKey": "REPLACE_WITH_PEER_PUBLIC_KEY",
"allowedIps": ["10.0.0.2/32", "192.168.50.0/24"],
"endpointHost": "peer.example.com",
"endpointPort": 51820,
"persistentKeepalive": 25
}
]
}
}
}
},
"firewall": {
"defaults": { "input": "drop", "output": "accept", "forward": "drop" },
"zones": {
"lan": { "members": ["lan0"], "input": "accept", "output": "accept", "forward": "accept" },
"wan": { "members": ["wan0"], "input": "drop", "output": "accept", "forward": "drop", "nat": true }
},
"forwardings": [{ "from": "lan", "to": "wan" }]
},
"system": {
"hostname": "my-router",
"timezone": "Asia/Tokyo",
"maintenanceWindows": [
{ "dayOfWeek": 0, "startTime": "02:00", "durationMinutes": 120, "timezone": "Asia/Tokyo" }
]
}
}