Setting up UDMP VLANs with Wireguard Site-to-Site IPSec

Setting up UDM-P VLANs with Wireguard Site-to-Site IPSec

In this article, we will discuss the process of setting up UDM-P VLANs with Wireguard Site-to-Site IPSec. This setup will allow for secure and efficient communication between different sites or networks. We will cover the key concepts, provide detailed instructions, and include code blocks to help you implement this solution.

UDM-P VLANs

UDM-P (Unifi Dream Machine Pro) is a popular network management device that allows for the creation and management of VLANs (Virtual Local Area Networks). VLANs are used to separate traffic within a network, providing better security and organization. In this example, we will be using the following VLANs:

• 10.92.10.0/24
• 10.92.41.0/24
• 10.92.42.0/24

Wireguard Server

Wireguard is a simple, fast, and modern VPN that utilizes state-of-the-art cryptography. In this setup, we will be adding the Wireguard server to the UDM-P and configuring it to use the IP address range 192.168.4.0/24. This will allow for secure communication between sites.

Site-to-Site IPSec

Site-to-Site IPSec is a type of VPN that allows for secure communication between different sites or networks. In this setup, we will be configuring Site-to-Site IPSec between the UDM-P VLANs and the Wireguard server. This will allow for secure communication between the different sites or networks.

Implementation

To implement this solution, follow these steps:

1. Configure the UDM-P VLANs:

   udm-settings VLAN
   set vlan10 network 10.92.10.0/24
   set vlan41 network 10.92.41.0/24
   set vlan42 network 10.92.42.0/24

2. Add the Wireguard server to the UDM-P:

   udm-settings wireguard
   set server1 listen-port 51820
   set server1 private-key 
   set server1 allowed-ips 192.168.4.0/24
   set server1 endpoint 
   set server1 persistent-keepalive 25

3. Configure Site-to-Site IPSec:

   udm-settings ipsec
   set site1 local-network 10.92.10.0/24
   set site1 remote-network 192.168.4.0/24
   set site1 local-id @udm-p
   set site1 remote-id @wireguard
   set site1 pre-shared-key 
   set site1 esp-encryption aes256
   set site1 esp-integrity sha256
   set site1 ike-encryption aes256
   set site1 ike-integrity sha256
   set site1 dh-group group24
   set site1 lifetime 8h
   set site1 proposal 1 enc-alg aes256 auth-alg sha256 dh-group group24
   set site1 proposal 1 phase1-lifetime 28800s
   set site1 proposal 1 phase2-lifetime 3600s

In this article, we discussed the process of setting up UDM-P VLANs with Wireguard Site-to-Site IPSec. This setup allows for secure and efficient communication between different sites or networks. By following the steps outlined in this article, you will be able to implement this solution and improve the security and organization of your network.

References

• UDM-P documentation: https://www.ubnt.com/download/udm-pro/
• Wireguard documentation: https://www.wireguard.com/
• Site-to-Site IPSec documentation: https://www.ubnt.com/download/udm-pro/

Note: The above code blocks are written in the UDM-P configuration language, please replace the placeholders such as , , with the actual values.