WireGuard VPN Remote Access SOP
This document details the WireGuard VPN remote access service hosted on pfSense (10.200.0.1), providing secure access to internal management subnets.
1. Tunnel Specifications
- Server Interface:
tun_wg0 - Listen Port:
UDP 51820 - Tunnel Subnet:
10.200.0.0/29 - Server Address:
10.200.0.1/29
2. Peer IP Allocations
| Peer Identifier | Tunnel IP | Allowed Remote Access Subnets | Notes |
|---|---|---|---|
| Admin Workstation 1 | 10.200.0.2/32 | 10.10.60.0/24, 10.10.30.0/24 | Full administrative control |
| Admin Workstation 2 | 10.200.0.3/32 | 10.10.60.0/24, 10.10.30.0/24 | Standby administrative host |
3. Client Configuration Template
ini
[Interface]
PrivateKey = <CLIENT_PRIVATE_KEY>
Address = 10.200.0.2/29
DNS = 10.10.60.1
[Peer]
PublicKey = <PFSENSE_SERVER_PUBLIC_KEY>
Endpoint = vpn.yourdomain.com:51820
AllowedIPs = 10.10.60.0/24, 10.10.30.0/24, 10.200.0.0/29
PersistentKeepalive = 25