UniFi Network - Wireguard VPN Access

UniFi Network - Wireguard VPN Access
In this video I am going to show you how to access your UniFi Network remotely from anywhere with internet access, using the Wireguard Server already built in to your UniFi Network controller.
I will also show you how to create the associated firewall rules to both block your Wireguard clients from accessing your other networks & vlans setup on your UniFi Network but also I will create 2 more rules to allow access to a specific device on your network, in this case a Synology NAS for shared file access.
Chapters
00:03 Intro
00:37 Setting up Wireguard
13:48 Creating the firewall rules to restrict VPN clients
Join this channel to get access to perks:
/ @mrtimtech2022

[@lofiplays_live]

THANK YOU! You were the only one who was able to explain this to me! I almost thought it wasnt possible in unify which would be pretty weird. Great explanation!

[@MrTimTech2022]

You're very welcome lofiplays_live - glad you were able to set this up using my instructions. Thanks again, your feedback is much appreciated.

[@nitka_it]

Brilliant !! Clear and easy. Thank You so much.

[@MrTimTech2022]

Glad you liked it! - You're very welcome!

[@TonyBerthun]

Great job on the firewall settings will be watching out for more stuff

[@MrTimTech2022]

Hey Tony, thanks very much, I appreciate your kind words. Certainly I will be doing further videos

[@danielkirira1798]

Thanks for the video. It helped me a lot.

[@MrTimTech2022]

Hey Daniel - You're most welcome. Glad it helped you out, let me know if there's anything else I can assist with (video wise)!

[@jrabbott34]

I absolutely cannot get Wireguard or OVPN to work on a Linux desktop client. They work on phones like your video, but can't get to work with network-manager in linux (arch, debian, etc.). Wireguard (unifi) only seems to connect with an ipv6 and OVPN seems to keep prompting for authentication. Just keep popping up. Any ideas?

[@MrTimTech2022]

To be honest I'm not really a techie as far as Linux is concerned, it's been years since I last used/tried Linux. I hate to redirect you to other channels but I wonder if Tom over at Laurence Systems might assist if you post a comment (kzbin.info/door/HkYOD-3fZbuGhwsADBd9ZQ) I hate not being able to provide help on a solution but I think on this one I'm not able, sorry 😟

[@fredcassidy6525]

Worked well, but NAS and VPN client are on differenet subnets x.x.1.x and x.x.2.x, so NAS is not discoverable

[@MrTimTech2022]

I think you would have to create a firewall rule to allow inter LAN traffice between the static IP of your NAS and the VPN client range.

[@fredcassidy6525]

@@MrTimTech2022 well I can ping my nas, and rule is there. I think main problem is different subnet. Is your NAS discoverable from VPN client lets say on Windows pc?

[@keleios355]

Very clear video, but one question. At kzbin.info/www/bejne/m4bJln9ngMyin6s it looks like you block all LAN traffic, not just with the Wireguard VPN.

[@MrTimTech2022]

No it's only blocking Inter VLAN traffic, not LAN traffic. So it just stops Wireguard VPN traffic from accessing other VLANS on my network. The Wireguard client can only access certain VLANS or devices using the rules I create. Hope that makes sense.