🌐

GL.iNet WireGuard Setup Guide

GL.iNet routers are OpenWrt-based with WireGuard client built into the web UI. One of the easiest setups available. Note: PostUp/PostDown lines are stripped by the GL.iNet UI — NAT is handled differently.

Create a tunnel in ProxyLink

Go to Devices → + Add → Router / LAN site, select Home / LAN Router, enter your LAN subnet (e.g. 192.168.1.0/24), and download your .conf file.

Open GL.iNet admin panel

Go to 192.168.8.1 in your browser (default GL.iNet IP) and log in.

Import the config

Go to VPN → WireGuard Client → Add a New VPN.

Select Upload Config File and upload your .conf file. The UI will parse all fields automatically.

Enable masquerade via SSH (router mode only)

GL.iNet strips PostUp lines. SSH into the router and add the masquerade rule permanently:

uci add firewall rule
uci set firewall.@rule[-1].name='proxylink-masq'
uci set firewall.@rule[-1].src='vpn'
uci set firewall.@rule[-1].dest='lan'
uci set firewall.@rule[-1].target='ACCEPT'
uci commit firewall

# Or add directly to firewall.user:
echo "iptables -t nat -A POSTROUTING -o br-lan -j MASQUERADE" >> /etc/firewall.user
fw3 restart

Connect the tunnel

Back in the GL.iNet admin panel, go to VPN → WireGuard Client and toggle your ProxyLink tunnel ON.

Good to know

GL.iNet's UI strips PostUp and PostDown directives when saving. You must add NAT rules via SSH in /etc/firewall.user to survive reboots.

GL.iNet Firmware 4.x has built-in policy routing — you can route specific LAN clients through the tunnel without any manual iptables rules.

What you get once the tunnel is up

Browser RDP, VNC, and SSH — open a terminal or remote desktop to any device behind the tunnel straight from the ProxyLink dashboard. No client software, no open ports on your side.
Proxy links — share an HTTPS URL that forwards to any internal web interface (NAS, NVR cameras, PBX admin panels, router UIs) with ProxyLink login in front of it.
No public exposure — the device keeps zero open ports and needs no static IP. The tunnel is outbound-only WireGuard to EU-hosted infrastructure. Read more about agentless remote access and NIS2 compliance.

Ready to connect?

Create a free account and set up your first tunnel in minutes. Free during early access — no card required.

Start free → Other platforms

Setup guides for other platforms

🐧Linux Server 🪟Windows 🍎macOS 🤖Android 📱iPhone / iPad 🔧OpenWrt 🗄️Synology NAS 📡Asus Merlin ⚙️MikroTik RouterOS 7 📶TP-Link 🛡️OPNsense 🔒pfSense 🔵Ubiquiti UniFi Gateway 🔷Ubiquiti EdgeRouter 📻Netgear 🔌Zyxel