Open “Connect” in your account, choose “Router”, then click “Create file” and “Download file”. No account yet? Create one.
The next steps are for OpenWrt 22.03 or later. On GL.iNet, ASUS, TP-Link, FRITZ!Box and MikroTik (RouterOS 7), upload the same file in the WireGuard section of the router's settings.
Step 2 of 7
Install WireGuard support
Sign in to the router over SSH and run these commands. The router then restarts:
Enable / Disable peer. Restart wireguard interface to apply changes.
Description
Imported peer configuration
Optional. Description of peer.
Public Key
AEzTepVJWjbJ3vMuP46bpD+orF6qBnw5LkJw5To+koU=
Required. Public key of the WireGuard peer.
Private Key
Optional. Private key of the WireGuard peer. The key is not required for establishing a connection but allows generating a peer configuration or QR code if available. It can be removed after the configuration has been exported.
Generate new key pair
Preshared Key
Optional. Base64-encoded preshared key. Adds in an additional layer of symmetric-key cryptography for post-quantum resistance.
Generate preshared key
Allowed IPs
0.0.0.0/0::/0+
Optional. IP addresses and prefixes that this peer is allowed to use inside the tunnel. Usually the peer's tunnel IP addresses and the networks the peer routes through the tunnel.
Route Allowed IPs
Optional. Create routes for Allowed IPs for this peer.
Endpoint Host
gw.syriaproxy.com
Optional. Host of peer. Names are resolved prior to bringing up the interface.
Endpoint Port
51820
Optional. Port of peer.
Persistent Keep Alive
25
Optional. Seconds between keep alive messages. Default is 0 (disabled). Recommended value if this device is behind a NAT is 25.
Configuration Export
Generate configuration…
Generates a configuration suitable for import on a WireGuard peer
General SettingsAdvanced SettingsFirewall SettingsDHCP ServerPeers
Create / Assign firewall-zone
wanwan: wan6: ▾
Choose the firewall zone you want to assign to this interface. Select unspecified to remove the interface from the associated zone or fill out the custom field to define a new zone and attach the interface to it.
DismissSave
Step 7 of 7
Save and apply
Click Save & Apply. After a moment, every device connected to the router goes out with a Syrian address.
