diff --git a/langs/zh/cgi-bin/zh.pl b/langs/zh/cgi-bin/zh.pl
index 347861c27..2ee377016 100644
--- a/langs/zh/cgi-bin/zh.pl
+++ b/langs/zh/cgi-bin/zh.pl
@@ -429,6 +429,7 @@
 'all services' => '所有服务',
 'all updates installed' => '已安装所有更新',
 'allmsg' => '显示所有',
+'allowed subnets' => '允许网段',
 'alt dialup' => 'PPP设置',
 'alt home' => '网络概括',
 'alt information' => '信息',
@@ -665,6 +666,7 @@
 'compression' => '压缩:',
 'computer to modem rate' => '计算机到modem的速率:',
 'concentrator name' => '集中器名称:',
+'configuration file' => '配置文件',
 'confirmation' => '确认',
 'connect' => 'OVPN 启动/连接',
 'connect the modem' => '连接调制解调器',
@@ -929,7 +931,7 @@
 'donation-link' => 'https://www.paypal.com/en_US/GB/i/btn/btn_donateCC_LG.gif',
 'donation-ipfire-text' => '<strong>IPFire</strong>由志愿者在空闲时间进行维护。为了保持该项目的运行成本，如果您愿意支持我们，请您为我们提供一小笔捐款。',
 'donation-bpfire-text' => '<strong>BPFire</strong>为普罗大众带来革命创新性的eBPF技术，为家庭用户或任何大小组织企业的网络安全保驾护航. 由Vincent Li在空闲时间进行维护。为了保持该项目的运行成本，如果您愿意支持他，请您为他提供一小笔捐款。',
-'done' => '做吧',
+'done' => '完成',
 'dos charset' => 'DOS字符集',
 'down and up speed' => '输入您的下行和上行速度<br /> 然后点击<i>保存</i>。',
 'downlink' => '下行链接',
@@ -1475,6 +1477,7 @@
 'ike lifetime should be between 1 and 24 hours' => 'IKE的有效期应在1到24小时之间。',
 'imei' => 'IMEI',
 'import' => '导入',
+'import connection' => '导入节点',
 'importkey' => '导入PSK',
 'imsi' => 'IMSI',
 'in' => '进',
@@ -1670,6 +1673,7 @@
 'local ntp server specified but not enabled' => '已指定但未启用本地NTP服务器',
 'local subnet' => '本地子网:',
 'local subnet is invalid' => '本地子网无效。',
+'local subnets' => '本地子网',
 'local vpn hostname/ip' => '本地VPN主机/IP',
 'localkey' => '本地密钥',
 'localkeyfile' => '本地密钥文件',
@@ -1938,6 +1942,7 @@
 'one month' => '1个月',
 'one week' => '1周',
 'one year' => '1年',
+'online' => '在线',
 'online help en' => '在线帮助（英语）',
 'only digits allowed in holdoff field' => '拖延字段中仅允许数字',
 'only digits allowed in max retries field' => '“最大重试次数”字段中仅允许数字。',
@@ -2213,6 +2218,7 @@
 'released' => '已发行',
 'reload' => '重新加载',
 'remark' => '备注',
+'remarks' => '备注',
 'remark title' => '备注:',
 'remote access' => '远程访问',
 'remote announce' => '远程通知',
@@ -2253,6 +2259,7 @@
 'root user password' => 'Root密码',
 'route subnet is invalid' => '其他推送路由子网无效',
 'router ip' => '路由IP地址:',
+'routing' => '路由',
 'routing table entries' => '路由表条目',
 'rsvd dst port overlap' => '目标端口范围与为IPFire保留的端口重叠:',
 'rsvd src port overlap' => '源端口范围与为IPFire保留的端口重叠:',
@@ -3064,6 +3071,49 @@
 'week-graph' => 'Week',
 'weekly firewallhits' => '防火墙命中(每周)',
 'weeks' => '周',
+'wg' => 'WireGuard',
+'wg client configuration file' => 'WireGuard客户端配置文件',
+'wg client pool' => '客户端地址池',
+'wg create host-to-net peer' => '创建新的主机对网络节点',
+'wg create net-to-net peer' => '创建新的网络对网络节点',
+'wg create peer' => '创建新节点',
+'wg dns' => 'DNS',
+'wg download configuration' => '下载配置',
+'wg download configuration file' => '下载配置文件',
+'wg edit host-to-net peer' => '编辑主机对网络节点',
+'wg edit net-to-net peer' => '编辑网络对网络节点',
+'wg edit peer' => '编辑节点',
+'wg host to net client settings' => '主机对网络客户端设置',
+'wg import peer' => '导入节点',
+'wg invalid client dns' => '无效的客户端DNS地址',
+'wg invalid client pool' => '无效的客户端地址池',
+'wg invalid endpoint address' => '无效的端点地址',
+'wg invalid endpoint port' => '无效的端点端口',
+'wg invalid keepalive interval' => '无效的Keepalive间隔（必须介于0到65535之间）',
+'wg invalid local subnet' => '无效的本地子网',
+'wg invalid name' => '无效的名称（仅允许字母、数字、空格和连字符）',
+'wg invalid psk' => '无效的预共享密钥',
+'wg invalid public key' => '无效的公钥',
+'wg invalid remote subnet' => '无效的远程子网',
+'wg keepalive interval' => 'Keepalive间隔',
+'wg leave empty to automatically select' => '留空以自动选择',
+'wg missing allowed ips' => '缺少AllowedIPs',
+'wg missing endpoint address' => '缺少端点地址',
+'wg missing endpoint port' => '缺少端点端口',
+'wg missing port' => '缺少端口',
+'wg missing private key' => '缺少私钥',
+'wg missing public key' => '缺少公钥',
+'wg name is already used' => '该名称已被使用',
+'wg no local subnets' => '未指定本地子网',
+'wg no more free addresses in pool' => '地址池中没有可用地址',
+'wg no remote subnets' => '未指定远程子网',
+'wg peer configuration' => '节点配置',
+'wg peer does not exist' => '节点不存在',
+'wg pre-shared key (optional)' => '预共享密钥（可选）',
+'wg rw peers' => 'WireGuard移动办公节点',
+'wg scan the qr code' => '扫描二维码将WireGuard配置导入移动客户端',
+'wg show configuration qrcode' => '显示配置二维码',
+'wg warning configuration only shown once' => '警告：此WireGuard配置文件仅显示一次，因其包含未存储在IPFire上的私钥材料',
 'whois results from' => 'WHOIS结果来自',
 'wildcards' => 'Wildcards',
 'winbind daemon' => 'Winbind进程',