vpn key-exchange

Exchange VPN keys and establish a VPN with a remote Island running the IslandExpress service.

Syntax

vpn key-exchange <host> <secret>

Syntax Description

Keyword	Description
host	The name or IP address of the remote Island running the IslandExpress service.
secret	The shared secret configured with the vpn server secret command on the remote Island.

Defaults

None; all parameters must be specified.

Usage Guidelines

Island supports an extention to the standard WireGuard protocol called IslandExpress that simplifies configuration of an Island-to-Island VPN. To use IslandExpress, one Island (typically the "hub" or "central" Island to which one or more remote Islands will be connecting) will configure and enable the IslandExpress service using the vpn server commands, including a shared secret phrase.

Once IslandExpress has been configured on an Island, other Islands can establish a VPN to it using only the vpn key-exchange command. Note that the IslandExpress service does not need to be configured on the Island on which the vpn key-exchange command is run.

By default, a VPN created using the vpn key-exchange command will be assigned a local IP address from a pool on the IslandExpress server to which it connects, and the IP address for traffic sent over the VPN will be translated to this address using NAT. However, once the VPN has been created, it can be modified as desired using the desired vpn peer commands.

A VPN created with this command will not be immediately available if the auto-trust option is enabled on the other Island. Refer to the vpn server auto-trust command for more information.

Examples

vpn key-exchange 198.51.100.28 mysecretpassword

Related Commands

vpn peervpn server