WireGuard Roadwarrior Client Setup

[tphz (iptom)]

@jakoch

WG VPN tunnel is only setup in IPFire for a remote client to route all their traffic into and through the firewall. That client has access to the internet RED through the firewall.

You can also decide what networks the peer is able to reach. By default, this is 0.0.0.0/0 to have the client route everything through the tunnel, but you can change it to your GREEN network to only route traffic to the local net over the VPN connection.

WireGuard

Maybe the posts below will be helpful

Wireguard - small hints for various configurations

I have collected tips from several of my posts on various configurations for Roadwarrior client access to the GREEN IPFireB network via IPFireA. WireGuardClient--WireGuardHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet [obraz] OVPNClient--OVPNHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet [obraz] WireGuardClient--WireGuardHost2Net--IPFireA--OVPNNet2Net--IPFireB--GreenNet [obraz] Regards

Wireguard VPN net-to-net local/remote subnets question

A few tips for configuring WireGuard N2N with 3 zones [obraz] IPFireA [obraz] IPFireB [obraz] IPFireA [obraz] IPFireA [obraz] edit The above results were obtained from a test environment set up between two IPFire CU200 devices.