Wireguard VPN setup

Post your reference.

Once you drill down past the one-click canned feature in MT’s GUIs, you’ll find that IPSec over L2TP is complicated. You can say just about anything you like about it and be correct for some given configuration.

Contrast WireGuard, which has only one common configuration. We can thus make general statements about its security without getting caught up in quibbling about configuration details.

Is WireGuard more secure than IPSec? Maybe! Send your configuration to a cryptanalyst along with a large check, and you might get an answer.


i would like to create VPN connection using Wiregurard.

I posted a very simple configuration here. If your MT router is on the border, you can drop the src-nat rule, simplifying it further. Or, see the post at the top of the thread for more ideas.


is it better for me to add another router at home ?

WireGuard lets you treat either end as the “server” part. The choice of best configuration simply depends on which end is easier to point at. If one end has a stable public IP, that’s the better end as compared to one behind NAT with a dynamic public IP.

But, you can get around that too, as your comments about dynamic DNS suggest. My posted configuration accounts for that.