Multiple VPN use cases
I currently have a simple WireGuard VPN server setup (Firewalla Gold). There are 6 client profiles configured for various devices. All work fine for when those devices are on the road.
I would like to add a new, specific use case with these requirements:
- New, different clients
- The new clients need to be limited to accessing a specific LAN segment, which will be through an unused hardware port. In other words, they should have no other access to other LAN segments.
- Potentially block the new clients from WAN access. I understand this would require the clients to have a split tunnel with local internet access allowed.
The part I'm not sure how to proceed on is having different rules for different clients, and limiting some clients to a single LAN segment.
Thanks for any direction!
-
You can try to apply below rules on the new WireGuard client device:
- Block all local networks
- Allow the specific LAN
- Block internet if need to
You can learn more here: Rules Logic
Please sign in to leave a comment.
Comments
1 comment