PiVPN + WireGuard Complete Setup - Build Your Own VPN Server!
ฝัง
- เผยแพร่เมื่อ 16 มิ.ย. 2024
- The PiVPN project is an easy way to create WatchGuard VPN client connections directly into your LAN. Follow along as I walk through the setup start to finish, and follow along with our step-by-step instructions linked below!
Step-by-step instructions: www.crosstalksolutions.com/pi...
PiVPN project: www.pivpn.io/
Timeline
00:00 Intro
03:17 Part 1 - Install Raspberry Pi OS Lite
06:23 Part 2 - Boot the Raspberry Pi and Log In
08:22 Part 3 - Update the Raspberry Pi
09:02 Part 4 - Install PiVPN
14:46 Part 5 - Add VPN Users
15:45 Part 6 - Firewall changes
17:10 Part 7 - Connect Devices
23:21 Part 8 - Backups
------------------------------------
Buy me a beer! ko-fi.com/crosstalk
Or donate some Crypto! crosstalksolutions.com/contact/
Follow me on Twitter: @crosstalksol
Crosstalk Solutions - RECOMMENDED PRODUCTS: crosstalksolutions.com/recomm...
Crosstalk Discord: / discord
Amazon Wish List: a.co/7dRXc67
Crosstalk Solutions offers best practice phone systems and network/wireless infrastructure design/deployment. Visit CrosstalkSolutions.com for details.
Connect with Chris:
Twitter: @CrosstalkSol
LinkedIn: goo.gl/j2Ucgg
TH-cam: goo.gl/g4G58M - วิทยาศาสตร์และเทคโนโลยี
![[MPD직캠] 베이비몬스터 직캠 8K 'LIKE THAT' (BABYMONSTER FanCam) | @MCOUNTDOWN_2024.6.13](http://i.ytimg.com/vi/8qa-nm9bCLs/mqdefault.jpg)
This was a FANTASTIC video Chris. I already had the Pi up and was able to install PiVPN in less than 20 minutes.
Actually the gateway problem-solving is what I was looking for for like 5 months. Finally I can sleep calmly! Thank you!
This was perfect, thank you so much. I requested a static IP address from my ISP - but before I was using a DDNS server, which just complicated everything. This was very straight forward - to the point. It even worked even though I was using a PI knock off (Armbian OS).
Note for users having issues: Make sure your forwarded port for wireguard is routed to the internal (private) IP address to your Pi on your router. That was my mistake.
THANK YOU SO MUCH.
Been looking for a simple VPN setup for my Orange Pi computers (2 homes). Although I am a little network savy, all of the prior videos on setting up Wireguard scared me away. This script and your great explanations are exactly what I needed. Thanks for posting this great tutorial.
Thanks man! I tried to do this a couple years ago but had some difficulty and gave up. Your video was great and I got it working. Now I can access my home server remotely and finally found a use for the pi ZeroW I had collecting dust.
Brilliant guide Chris as always and I have one running at my parents place in NZ, will have one running at my house in AUS and plan to have one running at a family's house in Texas all in the add of being able to use specific streaming services in specific countries. For everybody's benefit I use a GLiNET 300M plugged into an Apple TV because it has an inbuilt wireguard client at different locations around the world. ;)
Chris, this is a great video! thanks for the effort and also thanks for the blog post. Both really helped me with this project.
Absolutely flawless. Super simple, thank you.
I've been trying to figure out how to get this to work. I had no idea I had to do the debug at the end. Thank you so much
Finally. I know this is 1 year old.
But I was consistently having issues with the VPN not having internet connection. This time the debug flag actually worked and fixed the issue
The last couple of years I did three attempts to let PiVPN succeed (openvpn and wireguard) on one of my RPi-3B's. But never succeeded. This time "Mission is accomplished". Thanks to your clear explanation in the video.
It worked! So I was going to buy another pi to do this but saw somebody using one with pi-hole already installed... so I did that, got the same pi with pi-hole and pivpn installed, the only difference was on pivpn installation dns wizard, I choose the pi-hole instead of the other dns choices. Struggled a bit with the port forwarding on the router but got it working. Home assistant now works with the mobile network on my phone without nabu casa. Thanks!
I was waiting for this for a very long time !!! thanks so much !
Fantastic guide. Straightforward. Thanking You!
I love this channel. I've learned so much. Im a help desk tech, but unfortunately as a level 2 tech, Im not permitted to mess around with the network and understandably so. This is why ive built a homelab to teach myself and my hope is that it helps me move up in my career.
Too too perfect!! I've ben struggling for a while with OpenVpn. This is soooooo much easier. My next step is to put it in a docker container. Hopefully the vlan aspect won't give it any fits. That's for another day though. Right now I'm just going to celebrate my Wireguard victory!
&& specifically means run the next command only if the first command exited successfully for anyone that finds the need to know that.
Great video, this helped me figure out my problem, I was using 64 bit
Nicely done. New subscriber here. I watched another video on this subject from another channel before yours and found yours much better explained. Thanks.
I, as a tech and computing noob, managed after hours to get this working tonight. I found that it wouldn't work unless I disabled IPv6 on my Raspberry Pi network settings. The moment of being able to ping other devices on my network whilst on cellular data,- and see the last login from the client on pivpn, was a 100% GLORIOUS!
Thank you so much! I was able to follow the instructions and get it working. Great video
Thanks for the video. I am excited to have the VPN up and running!
I cannot begin to describe the level of frustration I've been having trying to get Wireguard to talk to my local lan. The debug command in PiVPN is, I think, what I've been missing. My phone is too old to run Wireguard, but I will have the option to test out my iPad and MBP soon. THANK YOU for that little nugget.
Thank you....I've been fighting this for a few days. The debug is what I needed. I didn't need that the first time I installed it and it worked, but this last install only worked after the debug!!
Ive tried this multiple times, including setting up a test pfsense router, at least I got to the wireguard installation onto my phone part, seemingly all is in place & should work, but not yet. I'll sleep on it & try it again soon. Wonderful concept only if I can get it working!!! Thanks for the video.
excellent guide I implemented it in my own network setup and it works fine!
Always very thorough, thank you.
WOW been wanting this for a long time. Getting it done now thanks !
Great video! Next I would like to see a video on adding pi-hole to this setup with pivpn already running
Thank you for your time doing this video!
Great video Chris!!!
Great resource, thanks for making this video!
Thanks! this is super helpful! Greetings from Costa Rica
Absolutely fantastic tutorial. Everything worked flawlessly, I even didn't have the same issue as yours at the end. thanks a bunch !
Still using it?
@@FloridaInvestor of course ;)
@@fata__morgana I want to do the same.
Thank you very much! Definitely much more than a beer! Bought it for you!
Always enjoy your videos Chris. This one is just in time for me as I start getting back into VPN stuff. -brickner
That was so simple. It was something that i have tried before but not knowing what to look for I tried much more advanced setups that I could not get to work but this worked like a charm!!! Have a pihole that I have been running for a long time so a note it is designed to work with the pihole and from the same pi and will detect that you are running pihole and ask you about it in the setup.
Wait, so I just install piVPN on top of my already existing pihole, and it will set the pivpn dns automatically to the pihole? Ooof! I was going to use a separate pi!
@@-someone-. yep and it works great
@@PatrickBaldwin1 thx man!
Thanks that helped me a lot !!! Greetings from Germany
Quality content sir, thanks for the tutorial!
Perfect tutorial! Thank you!
Amazing video everything that i needed!
Nice job ! Just like thé Displaycameras 👌🏻😁
Excelent video, very comprehensive.
But it would be awesome if you cover how to install and run a WireGuard server using an EdgeOS device.
One of the few times I will say this. GREAT VIDEO!
An interesting video Chris, thank you. One observation I had was that your second stint with the phone (after fixing the VPN Forwarding/MASQ issue) had the WiFi icon running rather than the LTE/VPN icon - now I am sure that it would work fine but just for consistency you might like to update this with the appropriate footage. Up to you of course... 😉
I saw that too. Right after the debug, it was on WiFi not VPN.
LTE was acting up on me during testing (high latency), so I switched to a different network and connected through WiFi. BUT - I was still ‘remote’ (external to my firewall) during that testing…I just didn’t mention the switch-up because it’s essentially the same thing, and takes time to explain what happened when I’m trying to make a concise video.
Great video. Quality content like this motivates to learn a bit of linux 😆
I was just setting up WG and PiVPN last week. 😀
Thanks so much! What a tremendous help!
This is fantastic. Thanks!
Thanks a lot, such an amazing video 😎
Great video, setup works the first time. What app do you use on your phone to ping the hosts on your network?
Really useful video thanks. As a novice however I did have several issues to overcome while following your instructions. It would have been useful to have demonstrated the DDNS option as few have a fixed IP. A link or screenshot of the apps and software used would also be useful. Creating an SSH file is pretty quick and could also have been included. I did get it working in the end so thanks.
What did you do to get a DDNS?
Hey man very good video it saved me a few days troubleshooting ... Have you tried this with OpenVPN and Grandstream IP phones?
Hi there ., it was perfect & informative tutorial video . thnx
Thanks for this tutorial
Great video, as always! The only critique I have is the part about 14 minutes in where you're choosing static IP vs. dynamic IP. Given the majority of users likely have a dynamic IP from their ISP, I'd say that setting up the DNS is completely within scope of this project.
But how you can put dynamic dns in this setup guide, can you please advise
Dead wrong. Most users have a static IP.
@@j.c.5011 It depends where in the world you are. Most residential customers in Europe and America have dynamic IPs because they're on IPv4 and their ISP simply doesn't have enough IP addresses. Many customers are even behind double-NAT/CGNAT. In Africa, India, and many other places, IPv6 is the norm and IPv4 is treated as a legacy protocol, so static IPs are much more common. However, even then, your ISP may decide to still dynamically allocate you a /64 range or some such.
Is there a guide on how to link my duckdns account to my piVPN?
Use the dhcp reservation on your router or hop over to noip to get one. It's pretty easy.
This was awesome. Mine worked like a minute.
Super Video - thank you 🙂
Great video, Chris! Got my setup done tonight. The only issue I ran into was when I was trying to get the Config files through WinSCP. I didn't have permission, so had to briefly change permissions for the folder to get the one I needed, then change permissions back.
How? hit the same wall
Found answer on github
As an addition to the subject, can you make a video about how to use obfuscation in combination with Wireguard (and/or OpenVPN) to bypass firewalls that are blocking anything but standard http(s) traffic?
The port forwarding was the missing bit for me. Ive been bashing my head about trying to make this work and your video solved it!
Thank you so much
Good stuff!
WG+Pi-Hole+Unbound is a great full setup.
I use that for the whole family.
Can pi hole run along side pi vpn.. Looking to get this done but am not sure if I'm wasting my time buying another pi to set up pivpn
Had it working fine side by side on Pi4.
@@imfuctifino
Still valid today for Pi5, Thanks.
Eyeing that stuck pixel. But also, great vid. Got a few Pis sitting around
Great video!! One question: how to setup the VPN server for the client(s) to have Internet access but no access for my home network. The purpose for this is for my friends to connect my VPN but no access to my local network. Thanks!
Thanks! Here is a beer for you. I think I’ll have some too!
Did that a few years back using openvpn. Used it for wifi security rather than accessing home network. Worked well, not looked at wireguard.
Great tutorial! Been using pivpn for a while but with openvpn... Wireguard seems better, specially because of the possibility of sharing tunnel with qr Code! but it's just too much hassle to reset my VPN 😅
Yeah, I made the jump to Wireguard earlier this year - from Openvpn. Much better on cpu i.e. battery life for a phone.
real good, thanks
Thank you very much !
Not sure here, not seeing any other comments.. but at @20:16 you're using your internal LAN and not LTE on your phone, correct? Other than that, great video and walkthrough! Oh and also.. a speed test is missing I think. Could you do a followup with a speed test comparing it with your speeds on LTE and such to see how much speed in/out you get? Of course that is tied to your real Internet speed, but I think I remember you had a couple hundred mbit on your home Internet or even a gbit?
IT FINALLY WORKED!
Love the video! I have used openvpn. Where there is a big problem is that we are limited in out going data. Is there a wiregard/openvpn smartphone app that has geo-fencing?
So I have an older Pi3, can it be used for this? Great Tutorial!
Good video again. Which one is better, the one included in UDM-PRO or this one?
Interested in this answer also
This is great! But how do you change the location so that when you log into your VPN its in another country that you are currently in?
Thanks, been looking for this for ages, every time I go looking for VPN software all I get is a pile of companies trying to sell me their VPN services (Nord VPN etc.)
Great video
Would the procedure for connecting an external router to pivpn be similar to the setup for a Windows client?
nice vid, just a little skeptic about opening the port on the router.
Hi Chris, firstly can I just say a big THANK YOU for all your helpful guides and videos, they are fantastic. I have a question in relation to pivpn if you can guide me please? When I deployed it as per your video it worked as you demonstrated, however I noticed that my music streaming in the house then failed to work. (I run a USG3, and the unifi controller sits on the same raspPi as well as Pihole), I am guessing that the local music streaming Denon speakers need some routing?
Great video as always. Is there a way I can VPN in to my network from like a TV (for netflix) ? Just wondering if there is a box at the remote end, that could form a connection to my Pi ?
Thanks!
Awesome video. In today's world of collaborating from home, it would be super useful to show an advanced PIVPN Wireguard/UFW setup wherein:
*The admin/owner has full access to any/all ip addresses (including all internet access flow) while using the VPN. I.E. the owner/admin would be using the Wireguard account for to access their entire network and/or to provide total encrypted privacy when traveling
* A restricted remote/client/coworker is only to access a single ipaddress when connected to the Wireguard vpn. The scenario here could be the owner/admin sharing out ONLY a samba fileserver over the Wireguard vpn and all other of the remote/client/coworker internet data would flow outside of the Wireguard vpn.
Would love to see such a setup, and based upon my research, no one has a detailed video on doing this sort of setup. ☺
You are a beast Ty
Thank you very much. Got this goin along with DuckDns on the RasPi 400. Def appreciate the good directions
Great video, thanks! Do you know of a way to do the same but without opening ports on the firewall? Something like installing central gateway in the cloud, then the pivpn will tunnel to it?
Interesting video, I finally configure mine using step by step instructions on this video. I am also using IOS phone but which tool are using to ping devices on the network.
yeah he did not mentioned that
Nice video. But I setup wireguard and openvpn in Docker containers on an old Bananpipro. Also easy and works well.
Love the guide, do you have one for Pi-hole?
Would also love to see this!
Great video, I’m going to rebuild my OpenVPN with this as it’s so much easier
Thanks for the great tutorial! I had a question.. If I don't care about remote connection to my home network, just vpn speed/latency at home - would this setup beat my current? Asus Rt-ax88u router with merlin firmware. I'm running wireguard with my purevpn subscription.
Hey, when the ping to NAS and gateway was made, it was on Wi-Fi, I suppose that’s why you reached websites and NAS, etc.
Would you be able to do a video where you can access both the local network and remote at the same time?
Great video… But did I miss something when you re-ran your VPN connection pings you were connected to wifi! Not the LTE network that you switched to when you ran it the first time and received no traffic. I’m sorry if I missed a step but it does look that way.
&& is actually more than that. The command after that will only be executed if the return code is 0, meaning that the command before the && has to be successful;). The opposite would be || . To always execute afterwards use ;
Aka shortcircuiting
I’m assuming that if I have a pi (Pi4 8gb ram) running another application, like Homebridge , that I could install/run PiVpn as well without a problem? Great video, just what I was looking for!
This video and the PiHole install video are very helpful and straight forward. But how does this Wireguard VPN compare to NordVPN other that it is free. Thanks and looking forward to more videos from you.
I already have Pihole, thinking of adding this to my network since the UDM Pro does not have a decent VPN option for my android devices.
Looking at the documentation it looks like it is designed to work with this. The information says to install it on the same pi as your pihole.
I had some trouble with this at first as even the debug didn't fix the issue. But right as I was gonna post a question to r/pfsense, I realized I had forgotten to move the rule "allow pivpn (DMZ) to reach SERVERS net" above the block all rule. Woops.
Pi3 a bit slow, but still working )) what else you want :D Thank you, now i have backup plan if my tailscale on unraid will die