Route10 Configuration from Alta Control

1. Log in to manage.alta.inc, or use your local Control address (version 1.0q or later is required for local Control instances).
2. Navigate to the Network section.
3. Open the configuration card for your Route10 by selecting its icon.
4. Switch to the VPN tab and open the WireGuard Server settings.
   • Toggle Enable to turn on the VPN.
   • Enter your desired gateway and subnet (e.g., 10.20.42.1/28). For more information about the CIDR notation (/28), please visit our CIDR Notation Article.
   • Optionally, specify custom DNS servers.
   • Save your configuration.
5. Go to the Auth tab. If you have an existing user, click on the user. Click Setup beside WireGuard, and then click Show to view the QR code which you’ll need in a moment to configure your client device. If you don’t have any users, you’ll need to create one. To add a user, perform the following steps:
   • Select Add User.
   • Enter the username (required) and password (optional).
   • Leave WiFi VLAN and IPSec VPN IP blank unless you know their purpose and intend to use them.
   • Beside WireGuard click Setup. The QR code will pop-up, click Close for now. Return here and click Show if you ever need to either view the QR code again or download a configuration file for a desktop client.
   • Repeat earlier steps for more users, then save your user changes.
     
     

     Note: Users in Auth are intentionally limited to one active session. Each client device connecting to the VPN requires its own user profile. A comprehensive article on the authentication server is forthcoming, and this article will be updated to include a reference once it becomes available.

Client Configuration

Mobile Operating Systems (Android, iOS, iPadOS)

Prerequisite: Please note that to perform the following steps on a desktop computer you'll first need to install the official WireGuard client. If you're an Android user, you can find the WireGuard client in the Play Store. If you have an iOS/iPadOS device then you can find the client in the App Store.

1. Open the app and allow permissions if requested (please allow any permissions requested throughout the setup and importing of the profile).
2. Tap the Plus sign in the upper right corner (lower right on Android).
3. Select Create from QR code (Scan from QR code on Android).
4. Point your mobile's camera towards the QR code found under your user in the Auth section on Control.
5. Provide a name for the tunnel profile you’re importing, and tap Save.
6. Toggle the switch to use your WireGuard VPN. You should be able to start it from the system VPN section in settings or from the WireGuard app.

Desktop Operating Systems (Linux, macOS, Windows)

Prerequisite: Please note that to perform the following steps on a desktop computer you'll first need to install the official WireGuard client. Please visit the official installation page found HERE to view the instructions for your preferred operating system.

Importing a WireGuard Config File on Windows and macOS:

1. Download the client configuration file to your computer. To to `manage.alta.inc`, Devices, select the Route10, go to Auth, click the username for this computer, and click Download.
   
2. Open the WireGuard application.
   • You can access it using one of the following methods:
     • Option 1: Open WireGuard directly using its shortcut. This will take you to the Tunnels Manager. Continue to step 2.
       
     • Option 2: Look near the clock on your taskbar (Windows) or in the status bar (macOS) for the WireGuard icon ()
       • Right-click the icon and select “Import tunnel(s) from file.”
       • Locate the configuration file (wg-alta-labs.conf by default) and confirm the import by clicking Import or Open (depending on the platform).
       • Continue to step 3.
3. Import the tunnel configuration (for Option 1).
   • In the Tunnels Manager, click the button labeled “Import tunnel(s) from file.”
     • Note: If this button is not visible, it means you already have WireGuard tunnels set up. In this case:
     • Click the Plus (+) sign and choose “Import tunnel(s) from file,” or
     • Click “Add Tunnel,” then select the configuration file (wg-alta-labs.conf by default), and confirm the import by clicking Import or Open (depending on the platform).
4. Grant permissions.

   • If prompted, grant the necessary permissions to create a VPN by selecting Allow.

     • Note: macOS will typically ask for permission the first time you import a tunnel, while this step may not appear on Windows.
       

5. Connect or disconnect from the VPN.
   • After successfully importing the tunnel, you can connect or disconnect using either of the following methods:
     • From the Tunnels Manager GUI: Select the tunnel you want to manage, then click Activate to connect or Deactivate to disconnect.
       
     • From the system tray or status bar: Right-click the WireGuard icon (), select the desired tunnel to connect. If it’s already connected, the option will be Deactivate instead.

Importing a WireGuard Config File on Linux:

Linux steps pending completion 01/16/25..