WireGuard Config - Allowed IPs
-
I've finally figured out how to set up WireGuard peers. I have a complicated situation in that my pfSense is a network device and is not performing routing capability. I have a static IP assigned to it (10.0.1.17).
My VPN network is 10.0.25.0/24.
When configuring the peer, I have allowed IPs set as 10.0.25.1/32, 10.0.25.(clientIP)/32, and 0.0.0.0/0 to force all traffic through the VPN.
Should I set the router's VPN IP (10.0.25.1/32) to 10.0.25.0/24 or leave it as is? I want clients on the VPN to be able to see and communicate with each other.
As usual, I probably am making this way more complicated than needed.
-
Also, does the Windows client not have an on-demand option?
-
I was able to get it figured out.
WireGuard going through my Netgate XG-1541 even if on the LAN side with router being a UniFi UDM-SE seems much quicker than the UDM-SE providing WireGuard.