Configure a WireGuard Tunnel

To configure a WireGuard Tunnel:

• Navigate to VPN > WireGuard
• Click  Add Tunnel
• Fill in the WireGuard Tunnel settings as described in WireGuard Tunnel Settings
• Click  Add Peer
• Fill in the WireGuard Peer settings as described in WireGuard Peer Settings
• Repeat the add/configure steps for peers if there are multiple peers
• Click Save
• Add firewall rules on Firewall > Rules, WAN tab to allow UDP traffic to the port for this WireGuard tunnel (WireGuard and Rules / NAT)
• Add firewall rules on the common Firewall > Rules, WireGuard tab to pass traffic inside the VPN (WireGuard and Rules / NAT)

After configuring the WireGuard instance, there are a few more optional steps depending on the requirements of the use case:

• Navigate to System > Routing
• Set the Default gateway options to a specific gateway or group, as long as they are not left at Automatic

Warning : If the default gateway remains set to Automatic the firewall may end up using the WireGuard interface as the default gateway, which is unlikely to be the desired outcome.

• Assign the WireGuard interface as a new OPTx interface (Assign a WireGuard Interface)
• Add firewall rules specific to this tunnel on Firewall > Rules, OPTx tab to pass traffic inside the VPN (WireGuard and Rules / NAT)
• Setup one of the alternate routing methods as described in WireGuard Routing, if needed.