DD-WRT WireGuard Setup Guide
This guide was produced using DD-WRT v46772.
Navigate to the home page of your router - By default
Tunnels> and click the
Add Tunnelbutton. Choose Enable and select WireGuard from the dropdown menu.
MTUvalue of the WireGuard tunnel to
Generate Keybutton and go to the
Client Areaon the IVPN website to add the generated public key to the
Key Managementarea. Make note of the IPv4 address we assign to your public key and add it to the IP address field followed by a
/32subnet mask.Hint: After clicking
Generate Key, it may or may not be possible to copy the public key displayed on the
Tunnelspage. Click the
Apply Settingsbuttons, then go to
Commandsand enter wg in the
Commandsbox, then click
Run Commands. This will display details of the WireGuard connection including the public key, which can be easily copied.
Enable. This will prevent out-bound traffic when the VPN client is disconnected from the server.
Add Peerbutton and enter the following peer configuration (as also shown in the screen shot below):
Note: You are welcome to use whichever server you prefer. The Endpoint Address and Peer Public Key in the example above are specific to our server in Sweden.
- Peer Tunnel IP: 0.0.0.0
- Peer Tunnel DNS: 172.16.0.1
- Endpoint: Enable
- Endpoint Address: Enter an IVPN WireGuard server hostname (available on the Server Status page) and choose a port:
udp 2049 udp 2050 udp 53 udp 30587 udp 41893 udp 48574 udp 58237
- Allowed IPs: 0.0.0.0/0
- Route Allowed IP’s via tunnel: Enable
- Persistent Keepalive: 25
- Peer Public Key: Enter an IVPN WireGuard server public key (available on the Server Status page)
- Use Pre-shared Key: Disable
Savebutton, then click the
Basic Setup, you might consider setting IVPN DNS servers in the Network Address Server Settings (DHCP) area:
- Static DNS 1: 172.16.0.1
- Static DNS 2: 188.8.131.52
Save and Apply the changes, reboot your router and wait for a minute or two for everything to settle, then reboot your computer system.