WireGuard site to site tutorial

[stepanov1975]

I know there are many tutorials already. This tutorial is based on this very good video tutorial
But, it took me a lot of time to get a working configuration, so I want to share my experience and also will be glad to get community feedback if I got something wrong

The WireGuard configured as the following

The tunnel network will be 10.0.20.0

Step 1 - Create the tunnel

• Press "Generate" button to generate keys
• Leave interface address empty
• "Listen port" - any port but should be same for both ends

Step 2 - Add interface

• The "IPv4 address" is what will be your side IP address for the tunnel network
• MTU 1400 for PPPoE connections (just approximation)

Step 3 - Add firewall rule for the created interface

"Any Any" for the beginning. So will not complicate initial setup

Step 4 - Add getaway

• The "Gateway" IP is the is other's side IP (inside tunnel network)

Step 5 - Add static route

• "Destination network" is other's side network

Step 6 - Add firewall WAN rule

Step 7 - Add tunel peer

• Public key is the public key from the other side
• Both other's side network and tunnel network should be added to "Allowed IPs"
• "Endpoint" is IP or hostname of the other side

The other side is configured exactly the same way. The only difference is interface IP and gateway II should be swapped