[Wireless Router] How to set up site to site VPN with WireGuard®? | Official Support | ASUS USA (2024)

FAQs

How do I setup a WireGuard VPN on my router? ›

WireGuard® is an advanced and modern VPN protocol that is easy to configure, providing blazing-fast speed, a leaner protocol, and it's seen as more secure than IPsec with the state-of-the-art cryptography. The functionality of WireGuard® VPN somehow performs better than well-known OpenVPN.

By default, WireGuard uses port 51820 UDP, though it can be configured to use other VPN port numbers if necessary. L2TP (Layer Two Tunneling Protocol) - this one uses various port numbers as well; TCP port 1701, UDP port 4500, and UDP port 500.

The biggest notable differences between WireGuard and OpenVPN are speed and security. While WireGuard is generally faster, OpenVPN provides heavier security. The differences between these two protocols are also their defining features. We've taken a closer look at each so you can really understand how they work.

If you're required to share information or resources between intranets from different locations, such as offices, chain stores, using site to site VPN with WireGuard® can quickly help you build up your private network to connect all these places.

Choose WireGuard if you prioritize simplicity, speed, and efficient resource usage. Opt for IPSec if you need extensive scalability, compatibility with existing infrastructure, and adherence to industry standards.

Do you need a VPN with WireGuard? ›

WireGuard doesn't mask your IP address on its own, as it's mainly used as a VPN protocol for secure communication. To mask your IP, you need to connect to a VPN service using WireGuard, which then assigns you a different IP address from its server network.

At the heart of WireGuard is a concept called Cryptokey Routing, which works by associating public keys with a list of tunnel IP addresses that are allowed inside the tunnel. Each network interface has a private key and a list of peers.

How do I change the VPN location on my router? You can change your location by installing a VPN on your router. Once you get it, connect to a server located in your desired country, and it will change your virtual location.

Many routers are ready to work with a VPN out of the box, but it is also possible to configure a router to connect to a VPN manually.

Go to Config > Network > Hostname and select the last option on the page, Use Manually Specified Address. Fill in the IP/Hostname field with the IP address you would like WireGuard to use as the endpoint.