documentation/docs/User-Guide_Armbian-Config/Network.md

Fixed and wireless network settings

---

Basic Network Setup

graph LR
  A{Select interface} --> B[Configure];
  A{Select interface} --> C[Drop];
  C ---->A;
  B -->F[DHCP];
  B ---->G[Static];
  G ------>| MAC, IP, route, GW, DNS|H[Configured];
  F -->| MAC | H[Configured];

Command:

armbian-config --cmd BNS001

Author: @igorpecovnik

Status: Stable

1. Select Interface:

   • Launch the armbian-config utility:

     sudo armbian-config
     

   • Navigate to Network and choose the desired network interface (e.g., eth0 for wired or wlan0 for wireless).

2. Wireless Interface Configuration:

   • If configuring a wireless interface:
     • A list of available Access Points (APs) will be displayed.
     • Select your preferred AP and enter the password when prompted. Leave the password field empty for open networks.

3. IP Address Configuration:

   • Choose between:
     • DHCP (Dynamic Host Configuration Protocol): Automatically assigns an IP address.
     • Static IP: Manually enter details:
       • MAC Address (optional): Specify if you want spoofing MAC address.
       • IP Address: Use CIDR notation (e.g., 192.168.1.10/24).
       • Route: Default is 0.0.0.0/0.
       • Gateway: Typically the router's IP, e.g., 192.168.1.1.
       • DNS: Default is 9.9.9.9, but can be changed.

4. Finalize Configuration:

   • Review and confirm your settings.
   • The system applies the configurations, and your network should be set up.

---

Remove Fallback DHCP Configuration

Drop preinstalled automatic DHCP on all wired interfaces after your configuration is setup.

Command:

armbian-config --cmd BNS002

Author: @igorpecovnik

Status: Stable

---

View Network Settings

Command:

armbian-config --cmd VNS001

Author: @igorpecovnik

Status: Stable

---

Advanced bridged network configuration

---

Add / change interface

graph LR
  A[Network] --> B[Add / Change interface];
  A[Network] --> O[Revert to defaults];
  A[Network] --> P[Show configuration];
  B ---->E[Wired];
  B ---->F[Wireless];
  E -->R[DHCP];
  E -->T[Static];
  E -->S[Spoof MAC];
  F -->X[Station];
  F -->W[Access point]; 

Command:

armbian-config --cmd NE002

Author: @igorpecovnik

Status: Stable

=== "Wired device check"

In order to configure your network devices, they need to be supported the kernel.

To verify, use command:

```sh
ip addr
```

It is usually something like eth0, enp4s3 or lan.

=== "Wireless device check"

In order to configure your wireless network devices, they need to be supported the kernel.

To verify, use command:

```sh
iw dev | awk '$1=="Interface"{print $2}'
```

It is usually something like `wlan0`, `wlo1` or `wlx12334c47dec3`. If you get blank response, it means your WiFi device / dongle is not supported by the kernel.

---

Revert to Armbian defaults

Command:

armbian-config --cmd NE003

Author: @igorpecovnik

Status: Stable

---

Show configuration

Command:

armbian-config --cmd NE004

Author: @igorpecovnik

Status: Stable

---

Show active status

Command:

armbian-config --cmd NE005

Author: @igorpecovnik

Status: Stable

---

WireGuard VPN client / server

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. Regarded as the most secure, easiest to use, and simplest VPN solution in the industry.

Command:

armbian-config --cmd WG001

Author: @armbian

Status: Enabled

=== "Access to the server from internet"

Remember to open/forward the port 51820 (UDP) through NAT on your router.

=== "Directories"

- Install directory: `/armbian/wireguard`
- Site configuration directory: `/armbian/wireguard/config`

=== "View logs"

```sh
docker logs -f wireguard
```

Install server and enable private network on a client

1. Install Wireguard server
2. It will asks you for peer keywords. It will make a profile for each peer
3. Download client to your PC, server or mobile phone. Scan OR code or copy credentials to the client.

Enjoy private network! Its that easy.

More informations:

https://docs.linuxserver.io/images/docker-wireguard/

---

WireGuard remove

This operation will remove WireGuard

Command:

armbian-config --cmd WG002

Author: @armbian

Status: Enabled

---

WireGuard clients QR codes

Command:

armbian-config --cmd WG003

Author: @armbian

Status: Enabled

---

WireGuard purge with data folder

This operation will purge WireGuard with data folder

Command:

armbian-config --cmd WG004

Author: @armbian

Status: Enabled

---