Overview

This document covers the setup of a Wireguard client on a Teltonika or MikroTik router that will enable DeepAlert remote access to the local network of the router, allowing for centralised streaming, health checks, camera configuration and setup.

There exists a DeepAlert “Management Service” tool, which can be used to automate the onboarding of the Wireguard client. Note that this tool works best on fresh installs, and may interfere with existing VPN setups on the router. Otherwise a manual installation guide has been provided.

Please note that for Teltonika routers, an extra package, “IPTables NAT Extra” is required on the router, which must be manually installed. This can be found by navigating to System > Package Manager in the router web interface, and searching for the package.

Automated install

The management service tool can currently be obtained by contacting [email protected]. The automated install uses the same steps for all router types.

1. Running the tool will show this window. You will only need the tool running when you are pushing configuration to the router.

   

2. Create an EdgePlus site in the DeepAlert management interface

   

3. (Optional) Test connection to the local management service. If this does not show “alive” then there is an issue between your browser and the management service. Try disabling adblockers.

   

4. Click “Provision VPN” and select the subnets which your cameras are on.

   

5. (Optional) You can now view your Wireguard peer details. Note that the private key is not stored, so the config will have to be re-provisioned if you lose it.

   

6. Enter router credentials. In the router section of this tab, click “Set credentials” and enter in your router credentials.

   

7. Now click “Push config to device” and the router will be configured with the correct settings.

8. (Optional) Click “Check VPN” to check the VPN server can now identify the router.

Manual Teltonika Install

1. Follow steps 2. and 4. from above to create a site in the DeepAlert system and register a Wireguard client. Save the Wireguard peer config after it is generated. The remainder of the steps will be in the router’s web interface.

2. Navigate to Services > VPN > Wireugard and click “add” to add a new Wireguard instance. Name it wg0.

   

3. Interface configuration. Click enable > Paste in the private key > Delete the public key > Copy in the address. The above details are all found in the first section of the Wireguard config provided.