44Net Connect/Quick Start/Debian based distributions: Difference between revisions

Latest revision as of 17:32, 20 August 2026

What you need

A 44Net Portal account
A verified amateur radio callsign
A configuration file from 44Net Connect
A machine running a Debian-based Linux distribution
Some sort of Internet access

If you haven't set up your Portal account or verified your callsign yet, see 44Net: Get Started for instructions. If you haven't obtained a WireGuard tunnel configuration file from 44Net Connect, get one using the the 44Net Connect quick start guide

Install Dependencies

Step 1: Ensure your OS is up to date

Open a terminal and run sudo apt-get update, then sudo apt-get upgrade.

Step 2: Install wireguard and systemd-resolved

Run sudo apt-get install wireguard systemd-resolved, then restart your Raspberry Pi. Restarting is required for systemd-resolved to function.

Step 3: Verify that systemd-resolved is enabled

Run systemctl status systemd-resolved. If the unit is running without issues, there will be a green asterisk or circle at the top left. The second line, beginning with "Loaded," should indicate that the unit is enabled. If it's not, run systemctl enable systemd-resolved to enable the unit. This will ensure that the unit starts automatically when your Raspberry Pi boots from now on.

The third line, beginning with "Active," should indicate that the unit is active (running). If it's not, run systemctl start systemd-resolved to start the unit. This will ensure that the unit is currently running.

Configure your WireGuard client

Create a new file for your WireGuard configuration in /etc/wireguard/, for example /etc/wireguard/wg0.conf.
You can name this file however you want, but this file name will become the name of your WireGuard interface.
Paste the configuration text in from 44Net Connect, or if you prefer to use the file that was emailed to you, upload that one.

The first time you create your tunnel, the private key will be present in the config for you to copy. Every subsequent time you view the config in the portal, the private key will not be shown. Saving a backup of the private key in a secure place is recommended.

After creating your config file, set its permissions so that only the owner has read or write permissions. This can be done with the command sudo chmod 600 /etc/wireguard/wg0.conf. (Replace wg0 with the name of your file.)

Activate and connect

Activate your tunnel

Run the command wg-quick up wg0 (replace wg0 with the name of your configuration file if different).
If at this step WireGuard reports the error Failed to activate service 'org.freedesktop.resolve1': timed out, you may have forgotten to restart your computer after installing systemd-resolved.

Confirm Connection in the Connect dashboard

Your tunnel status should show as "Active" with a green indicator.

The Endpoint field should show the IP address your device is connecting from, as well as the port it's using. This is not the 44Net IP from which your device is publicly accessible.

Other Ways to Confirm Connection

Visit https://connect.44net.cloud/myip in your browser, or query it from the command line using curl https://connect.44net.cloud/myip
Use traceroute to inspect the path between you and some other device, such as traceroute 1.1.1.1. When the tunnel is working, the first hop will be through a 44Net gateway, so its IP will be in the 44.0.0.0/9 or 44.128.0.0/10 subnet.

Starting the Tunnel Automatically

On Linux distributions that use systemd, using the systemd unit automatically generated by wg-quick is the recommended way to automatically start the tunnel. These are automatically created for any config file in /etc/wireguard.
The automatically created unit is called wg-quick@<config file name>.service, so a file /etc/wireguard/wg0.conf would make wg-quick@wg0.service.
Enable and start the service by running sudo systemctl enable --now wg-quick@<config file>, where <config file> is replaced with the name of your config file without the extension.
Verify that the service has started by running systemctl status wg-quick@<config file> and checking that it says enabled and active, the same way we previously checked that systemd-resolved was working.

@@ Line 1: / Line 1: @@
+<noinclude>
 <div class="toclimit-3">
 __TOC__
 </div>
-{{DISPLAYTITLE:44Net Connect Quick Start: Raspberry Pi}}
+{{DISPLAYTITLE:44Net Connect Quick Start: Debian-based distributions}}
-<noinclude>
 === What you need ===
@@ Line 57: / Line 57: @@
 == Starting the Tunnel Automatically ==
-* On Linux distributions that use <code>systemd</code>, creating a <code>systemd</code> unit is the recommended way to automatically start the tunnel.
+* On Linux distributions that use <code>systemd</code>, using the <code>systemd</code> unit automatically generated by <code>wg-quick</code> is the recommended way to automatically start the tunnel. These are automatically created for any config file in <code>/etc/wireguard</code>.
-* Create a unit file in <code>/etc/systemd/system/</code>, for example <code>/etc/systemd/system/44net-tunnel.service</code>.
+* The automatically created unit is called <code>wg-quick@<config file name>.service</code>, so a file <code>/etc/wireguard/wg0.conf</code> would make <code>wg-quick@wg0.service</code>.
-* Paste the following into the file.
+* Enable and start the service by running <code>sudo systemctl enable --now wg-quick@<config file></code>, where <code><config file></code> is replaced with the name of your config file without the extension.
- <nowiki>
+* Verify that the service has started by running <code>systemctl status wg-quick@<config file></code> and checking that it says enabled and active, the same way we previously checked that systemd-resolved was working.
-[Unit]
-Description=WireGuard single device 44Net Connect tunnel
-Requires=network-online.target
-[Service]
-Type=oneshot
-RemainAfterExit=true
-# Edit these lines if your config file is named differently.
-ExecStart=wg-quick up /etc/wireguard/wg0.conf
-ExecStop=wg-quick down /etc/wireguard/wg0.conf
-[Install]
-WantedBy=multi-user.target
-</nowiki>
-* If your config file is named something other than <code>wg0.conf</code>, edit the <code>ExecStart</code> and <code>ExecStop</code> lines so that they reflect the correct file name.
-* Enable and start the service by running <code>sudo systemctl enable --now 44net-tunnel.service</code>. If you named your unit file something else, use that name instead of <code>44net-tunnel.service</code>.
-* Verify that the service has started by running <code>systemctl status 44net-tunnel.service</code> and checking that it says enabled and active, the same way we previously checked that systemd-resolved was working.
 [[Category:Tutorial]]