Do bazy wiedzy
Dokument informacyjny #3687

Setting up a WireGuard VPN between the FRITZ!Box and another router

Our step-by-step guide on how to securely connect the FRITZ!Box with another manufacturer's router via VPN (WireGuard). ✓

With WireGuard VPN, you can also connect your FRITZ!Box over the internet (LAN-LAN linkup) with a router from another manufacturer that supports WireGuard. This allows you to access all of the devices in the remote network and use all of the IP-based services such as email servers, databases, and file servers at both locations.

You can find an overview of additional VPN connection options in our guide VPN with FRITZ!.

Requirements / Restrictions

  • The other router must obtain either an IPv6 address or a public IPv4 address from the internet service provider. The FRITZ!Box must obtain an IP address with the same protocol version (IPv4 or IPv6)
  • No WireGuard connections may have been set up in the FRITZ!Box yet (for example for a smartphone). If WireGuard connections have already been set up in the FRITZ!Box, these must be deleted before setting up the connection to the other router.

1 Preparations

Configuring MyFRITZ!

To set up WireGuard connections, the FRITZ!Box needs a MyFRITZ! address:

Setting up MyFRITZ!
  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click on "MyFRITZ! Account" in the "Internet" menu.
  3. Enter your email address in the "Your email address" field.
  4. Click on "Apply". Now MyFRITZ!Net sends you an email with the confirmation link to your FRITZ!Box.

    Important:If you do not receive an email, the email was classified as unsolicited advertising (spam). In this case, check the spam folder of your email inbox.

  5. Open the email you received from MyFRITZ!Net.
  6. Click the "Register Your FRITZ!Box" button in the email.

Adapting the IP Networks

Changing the FRITZ!Box's IP network
  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click on "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click "Additional Settings" in the section "LAN Settings" to display all of the settings.
  5. Click the "IPv4 Settings" button.
  6. Enter the desired IP address and subnet mask.

    Important:Do not enter an IP address from the network 192.168.100.x. In compliance with DOCSIS, this network is reserved for the cable provider and may not be used in the FRITZ!Box.

  7. Click "Apply" to save the settings and on the FRITZ!Box, confirm that the procedure may be executed, if you are asked to do so.

2 Configuring a VPN connection in the other router

  1. In the router, set up a WireGuard connection to another router (LAN-LAN linkup or site-to-site connection). Refer to the router's manufacturer for information on how to set it up.

    Important:When creating the WireGuard connection for the FRITZ!Box, do not enter an IP address from a transfer network (intermediate address), enter the local IP address of the FRITZ!Box (for example 192.168.20.1, subnet mask 255.255.255.0) instead.

  2. Download the settings file for the WireGuard connection from the router to the computer.

3 Setting up a VPN connection in the FRITZ!Box

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click on "Permit Access" in the "Internet" menu.
  3. Click the "VPN (WireGuard)" tab.
  4. Click the "Add Connection" button.
  5. Click "Connect networks or establish special connections" and then "Next".
  6. By "Has this WireGuard connection already been set up at the remote connection?", click "Yes".
  7. Click "Next".
  8. Enter a unique name for the connection (Headquarters) in the field "Name of the WireGuard connection".
    Setting up WireGuard connection to another router in FRITZ!Box
  9. Click the "Choose File" or "Browse..." button.
  10. Select the settings file for the WireGuard connection that you downloaded from the other router and click "Open".
  11. If you do not only want to use the VPN connection to access the remote network, but also want all web requests to be sent over the VPN connection to the other router, enable the option "Send all IPv4 network traffic via the VPN connection".
  12. Enable the option "Allow NetBIOS over this connection" if access to Windows file and printer sharings (SMB shares) in the remote network should be allowed.
  13. If only certain devices in the home network of the FRITZ!Box should be reachable via the VPN connection, enable the option "Only certain devices in the home network are to be accessible over this WireGuard connection" and select the corresponding devices.
  14. Click the "Finish" button.
  15. If you are asked to do so, on the FRITZ!Box confirm that the procedure may be executed and click "OK" to complete the procedure.

Now the VPN connection is set up and the FRITZ!Box is permanently connected to the other router.

Wybór języka