Recommend:
To the knowledge base
Knowledge document #3687

Setting up a WireGuard VPN between the FRITZ!Box and another router

Our step-by-step guide on how to securely connect the FRITZ!Box with another manufacturer's router via VPN (WireGuard). ✓

With WireGuard VPN, you can also connect your FRITZ!Box over the internet (LAN-LAN linkup) with a router from another manufacturer that supports WireGuard. This allows you to access all of the devices in the remote network and use all of the IP-based services such as email servers, databases, and file servers at both locations.

You can find an overview of additional VPN connection options in our guide VPN with FRITZ!.

Requirements / Restrictions

  • The other router must obtain either an IPv6 address or a public IPv4 address from the internet service provider. The FRITZ!Box must obtain an IP address with the same protocol version (IPv4 or IPv6) from the internet service provider.
  • No WireGuard connections may have been set up in the FRITZ!Box yet (for example for a smartphone). If WireGuard connections have already been set up in the FRITZ!Box, these must be deleted before setting up the connection to the other router.

Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.

1 Preparations

Configuring MyFRITZ!

To set up WireGuard connections, the FRITZ!Box needs a MyFRITZ! address:

Setting up MyFRITZ!
  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click on "MyFRITZ! Account" in the "Internet" menu.
  3. Enter your email address in the "Your email address" field.
  4. Click "Apply". Now MyFRITZ!Net sends you an email with the confirmation link to your FRITZ!Box.

    Important:If you do not receive an email, the email was classified as unsolicited advertising (spam). In this case, check the spam folder of your email inbox.

  5. Open the email you received from MyFRITZ!Net.
  6. Click the "Register Your FRITZ!Box" button in the email.

Adapting the IP Networks

Both ends of a VPN connection must have IP addresses in different IP networks. VPN communication is not possible if the FRITZ!Box is connected to a router that uses the same IP network as the FRITZ!Box.

Set up an IP address in the FRITZ!Box that differs from the IP addresses of the router that the FRITZ!Box is to connect with:

Example:
The router at headquarters has the IP address 192.168.10.1 (subnet mask 255.255.255.0) and the FRITZ!Box has the IP address 192.168.20.1 (subnet mask 255.255.255.0).

Changing the FRITZ!Box's IP network
  1. Click "Home Network" in the FRITZ!Box user interface.
  2. Click on "Network" in the "Home Network" menu.
  3. Click on the "Network Settings" tab.
  4. Click "Additional Settings" in the section "LAN Settings" to display all of the settings.
  5. Click the "IPv4 Settings" button.
  6. Enter the desired IP address and subnet mask.
  7. Click "Apply" to save the settings and on the FRITZ!Box, confirm that the procedure may be executed, if you are asked to do so.

2 Configuring a VPN connection in the other router

  1. In the router, set up a WireGuard connection to another router (LAN-LAN linkup or site-to-site connection). Refer to the router's manufacturer for information on how to set it up.

    Important:When creating the WireGuard connection for the FRITZ!Box, do not enter an IP address from a transfer network (intermediate address), enter the local IP address of the FRITZ!Box (for example 192.168.20.1, subnet mask 255.255.255.0) instead.

  2. Download the settings file for the WireGuard connection from the router to the computer.

3 Setting up a VPN connection in the FRITZ!Box

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "VPN (WireGuard)" tab.
  4. Click the "Add Connection" button.
  5. Click "Connect networks or establish special connections" and then "Next".
  6. By "Has this WireGuard connection already been set up at the remote connection?", click "Yes".
  7. Click "Next".
  8. Enter a unique name for the connection (Headquarters) in the field "Name of the WireGuard connection".
  9. Click the "Choose File" or "Browse..." button.
  10. Select the settings file for the WireGuard connection that you downloaded from the other router and click "Open".
  11. Click the "Finish" button.
  12. If you are asked to do so, on the FRITZ!Box confirm that the procedure may be executed and click "OK" to complete the procedure.

Now the VPN connection is set up and the FRITZ!Box is permanently connected to the other router.

Language selection