vpn key-exchange
Exchange VPN keys and establish a VPN with a remote Island running the IslandExpress service.
Syntax
Syntax Description
host
The name or IP address of the remote Island running the IslandExpress service.
secret
Defaults
None; all parameters must be specified.
Usage Guidelines
Island supports an extention to the standard WireGuard protocol called IslandExpress that simplifies configuration of an Island-to-Island VPN. To use IslandExpress, one Island (typically the "hub" or "central" Island to which one or more remote Islands will be connecting) will configure and enable the IslandExpress service using the vpn server commands, including a shared secret phrase.
Once IslandExpress has been configured on an Island, other Islands can establish a VPN to it using only the vpn key-exchange command. Note that the IslandExpress service does not need to be configured on the Island on which the vpn key-exchange command is run.
By default, a VPN created using the vpn key-exchange command will be assigned a local IP address from a pool on the IslandExpress server to which it connects, and the IP address for traffic sent over the VPN will be translated to this address using NAT. However, once the VPN has been created, it can be modified as desired using the desired vpn peer commands.
A VPN created with this command will not be immediately available if the auto-trust option is enabled on the other Island. Refer to the vpn server auto-trust command for more information.
Examples
Related Commands
Last updated