Installing and Configuring Wireguard on the UniFi Security Gateway

Install the Wireguard Package SSH directly to your USG, and run the following commands: curl -L https://github.com/Lochnair/vyatta-wireguard/releases/download/0.0.20190123/wireguard-ugw3-0.0.20190702-1.deb -o /tmp/wireguard.deb dpkg -i /tmp/wireguard.deb Create the Tunnel Secrets To keep stuff private, we will encrypt the traffic using a long password, known as a ‘Key’. To make sure this is unique, we will use a tool provided by Wireguard to make a random key for us. cd /config/auth umask 077 mkdir wireguard cd wireguard wg genkey > wg_private.