Skip to main content

WireGuard

VPN > WireGuard creates tunnels with the WireGuard protocol: lightweight, modern and widely available on many platforms. It suits both connecting sites and giving individual devices access.

Server tunnels​

A server tunnel accepts connections from peers.

  1. Add a tunnel and set its name, the listening port and the VPN network, a private network used by the peers. Choose a network that is not used anywhere else. The VPN network cannot be changed after the first configuration.
  2. Add the peers. For each one you set a name, the address it receives, the networks behind it (if it is a site), and whether it sends all its traffic through the tunnel.
  3. Save and Apply changes.
  4. For each peer, download the configuration or show its QR code and give it to the peer.

:::caution Changes reach peers only when they update When you edit the server or a peer, the peers must download the updated configuration or be adjusted by hand. The page warns you. :::

Deleting a tunnel also deletes its peers and disconnects them. Deleting a peer disconnects it.

Peer tunnels (client side)​

To connect this unit to another WireGuard server, open the client side of the page and import the configuration file generated by that server, or enter the parameters by hand. This works with any device that supports WireGuard.

Tips​

  • Use short lived, per person peers for users, and one peer per site.
  • Control what tunnel users can reach with firewall rules.
  • Check the tunnel state in the Monitor.