WireGuard Config - Allowed IPs

ericnix · Dec 31, 2022, 7:34 AM

I've finally figured out how to set up WireGuard peers. I have a complicated situation in that my pfSense is a network device and is not performing routing capability. I have a static IP assigned to it (10.0.1.17).

My VPN network is 10.0.25.0/24.

When configuring the peer, I have allowed IPs set as 10.0.25.1/32, 10.0.25.(clientIP)/32, and 0.0.0.0/0 to force all traffic through the VPN.

Should I set the router's VPN IP (10.0.25.1/32) to 10.0.25.0/24 or leave it as is? I want clients on the VPN to be able to see and communicate with each other.

As usual, I probably am making this way more complicated than needed.

ericnix · Dec 31, 2022, 7:54 AM

Also, does the Windows client not have an on-demand option?

ericnix · Jan 1, 2023, 4:08 PM

I was able to get it figured out.

WireGuard going through my Netgate XG-1541 even if on the LAN side with router being a UniFi UDM-SE seems much quicker than the UDM-SE providing WireGuard.