Wiregurd config on multiple interfaces

Started by Mming, July 21, 2025, 08:54:05 AM

Previous topic - Next topic
Good morning, I´m currently planning to set up Wireguard on multiple interfaces, but a bit unclear about the mest way of doing it.

The setup is as follows:
1 WAN interface, here I plan to implement Wireguard in a classicl "road-warrior setup" to enable remote access when not on-prem.
I aslo have multiple internal vlan interface, on different physical interfaces. vlan2 attached to opt1 and vlan8 attached on opt2 in this specific case.
Wireguard needs to be configured so it will accept connections on vlan2 and enable these connections to access both vlan8 and external access (internet).
What would be the best way to achieve this? Based on my understanding of how Wireguard works, I need to create 2 Wireguard instances, and 1 interface for each
Instance, then I´m  able to configure traffic for vlan2 independantly of the traffic for the WAN interface. In other words, clients on vlan2 can initiate a
Wireguard connection and throught the corresponding VPN tunnel they´re allowed to access vlan8 (or any other internal vlan protected behond the firewall.)

Any help woould be grately appreciated

/MM