🔷
← All setup guides
Ubiquiti EdgeRouter WireGuard Setup Guide
EdgeOS 3.0+ has native WireGuard built-in using a VyOS-style configuration. EdgeOS 2.x requires the community wireguard-vyatta-ubnt package (where PostUp works normally).
1
Create a tunnel in ProxyLink
Go to Devices → + Add → Router / LAN site, select Home / LAN Router, enter your LAN subnet, and note all values from the downloaded config.
2
Configure WireGuard (EdgeOS 3.x CLI)
configure set interfaces wireguard wg0 private-key YOUR_PRIVATE_KEY set interfaces wireguard wg0 address YOUR_VPN_IP/24 set interfaces wireguard wg0 peer SERVER_PUBLIC_KEY endpoint 46.225.153.241:51820 set interfaces wireguard wg0 peer SERVER_PUBLIC_KEY allowed-ips 10.100.0.0/16 set interfaces wireguard wg0 peer SERVER_PUBLIC_KEY persistent-keepalive 25 commit ; save
3
Add NAT masquerade rule
set nat source rule 10 description "ProxyLink masquerade" set nat source rule 10 outbound-interface br0 set nat source rule 10 source address 10.100.0.0/16 set nat source rule 10 action masquerade commit ; save
4
Allow forwarding
set firewall name PROXYLINK_IN default-action accept set interfaces wireguard wg0 firewall in name PROXYLINK_IN commit ; save
Good to know
EdgeOS 2.x with the community wireguard-vyatta-ubnt package works with standard wg-quick and PostUp lines work normally from the .conf file.
The LAN bridge on EdgeRouter is typically br0. Confirm with: show interfaces bridge.
What you get once the tunnel is up
- Browser RDP, VNC, and SSH — open a terminal or remote desktop to any device behind the tunnel straight from the ProxyLink dashboard. No client software, no open ports on your side.
- Proxy links — share an HTTPS URL that forwards to any internal web interface (NAS, NVR cameras, PBX admin panels, router UIs) with ProxyLink login in front of it.
- No public exposure — the device keeps zero open ports and needs no static IP. The tunnel is outbound-only WireGuard to EU-hosted infrastructure. Read more about agentless remote access and NIS2 compliance.
Ready to connect?
Create a free account and set up your first tunnel in minutes. Free during early access — no card required.