Deutsche Telekom is the first supplier of routers for small networks to offer the WireGuard VPN protocol: owners of the Speedport models Smart 3 and W925V (version 2) can configure it via the web interface after updating the firmware. There was no public announcement on the part of Telekom.
Activating WireGuard is very easy: One click creates the short line configuration (see example). The then displayed QR code can be photographed or – currently more sensible – a file can be downloaded. Because the Speedport router is currently entering the WAN IP address used at the time of setup. Because this changes the next time you dial in to the Internet, you have to set up a DynDNS service, enter the chosen DynDNS name instead of the address in the file and can then import it to the client.
[Interface]
PrivateKey =
Address = 10.200.200.1/24
DNS = 192.168.2.1
[Peer]
PublicKey =
AllowedIPs = 0.0.0.0/0
Endpoint = 203.0.213.42:53280
PersistentKeepalive = 21
– The configuration of WireGuard in the Speedport is especially geared towards beginners, but cuts the protocol in the range of functions.
Features & performance
WireGuard integration by Telekom is currently still a bit tight: the configuration only allows one user who can access the home network and the Internet via IPv4. The WireGuard configuration file on the Speedport cannot currently be edited freely, which is why multiple VPN users or transparent connections between two networks (site-to-site VPN) are not possible. IPv6 is missing as both a transport and a tunnel protocol.
If Deutsche Telekom retrofits the range of functions, the Speedports can overtake Fritz boxes on the right in terms of VPN AVMs: The c’t editorial team was able to test WireGuard on a Speedport Smart 3 and achieved around 74 Mbit / s TCP data rate.
Came to stay
Upon request, Telekom said that the WireGuard integration was not a temporary test and that the VPN protocol would be retained. The next candidate for WireGuard is expected to be the Speedport Pro DSL-LTE hybrid router.
(amo)
– .
