vpn key-exchange
Exchange VPN keys and establish a VPN with a remote Island running the IslandExpress service.
Last updated
Island Router CLI Reference Guide 2.3.2
Exchange VPN keys and establish a VPN with a remote Island running the IslandExpress service.
Last updated
host
The name or IP address of the remote Island running the IslandExpress service.
secret
None; all parameters must be specified.
Island supports an extention to the standard WireGuard protocol called IslandExpress that simplifies configuration of an Island-to-Island VPN. To use IslandExpress, one Island (typically the "hub" or "central" Island to which one or more remote Islands will be connecting) will configure and enable the IslandExpress service using the commands, including a shared secret phrase.
Once IslandExpress has been configured on an Island, other Islands can establish a VPN to it using only the command. Note that the IslandExpress service does not need to be configured on the Island on which the command is run.
By default, a VPN created using the command will be assigned a local IP address from a pool on the IslandExpress server to which it connects, and the IP address for traffic sent over the VPN will be translated to this address using NAT. However, once the VPN has been created, it can be modified as desired using the desired commands.
A VPN created with this command will not be immediately available if the auto-trust option is enabled on the other Island. Refer to the command for more information.
The shared secret configured with the command on the remote Island.