Install with wg-quick
Use this method on Raspberry Pi OS and other Debian-based distributions. Give the Raspberry Pi its own Dashboard profile rather than reusing one from another device.
Before you begin
- Update Raspberry Pi OS and make sure the Raspberry Pi has working internet access.
- Have an account with
sudoaccess. - Keep local or SSH access available while changing the network route.
Move the WireGuard profile to the Raspberry Pi
- Download profile: save the
.conffile directly. - Email: select Send profile, then Send email.
- Device access code: select Send profile, then Get code. On the Raspberry Pi, open dash.teklanvpn.com/get, enter the code and download the profile. The code expires after 15 minutes and works once.
Steps
-
Run
sudo apt update && sudo apt install wireguard openresolv.openresolvletswg-quickapply the profile’s DNS setting. -
Move the downloaded file to
/etc/wireguard/teklan.conf. -
Protect it with
sudo chmod 600 /etc/wireguard/teklan.conf. -
Start the tunnel with
sudo wg-quick up teklan. -
When the checks below pass, start it automatically after boot with
sudo systemctl enable wg-quick@teklan.
Check the connection
- Run
sudo wg showand look for a recent handshake. - Run
curl https://api.ipify.organd confirm the public IP address changed. - Test the service the Raspberry Pi is intended to run before enabling automatic startup.
If it does not connect
- Run
sudo wg-quick down teklanto restore the previous route. - Check the Raspberry Pi date and time and confirm UDP traffic is allowed by the local network.
- Download a new profile if the Dashboard profile was replaced or revoked.
Still stuck? See the help articles, or open a support ticket with the exact error you see.
