Ubiquiti UniFi Gateway WireGuard Setup Guide
UniFi gateways (UDM, UDM Pro, UDM SE, UCG-Ultra) support WireGuard client natively in UniFi Network 7.x. The controller manages NAT automatically — no PostUp or iptables needed.
Create a tunnel in ProxyLink
Go to Devices → + Add → Router / LAN site, select Home / LAN Router, enter your LAN subnet, and download your .conf file.
Open the UniFi Network controller
Log into your UniFi Network application (local or cloud).
Create a VPN Client
Go to Settings → VPN → VPN Client → Create New.
- VPN Type: WireGuard
- You can import your
.conffile directly - Or fill in manually: Private Key, Address, Server Public Key, Endpoint, Allowed IPs
Enable and test
Toggle the VPN client ON. UniFi handles NAT and routing automatically for traffic assigned to use this tunnel. No iptables rules needed.
Route LAN traffic (optional)
To route specific LAN clients or networks through the ProxyLink tunnel, go to Traffic Management → Policy-Based Routing and create a rule targeting your VPN client.
Good to know
What you get once the tunnel is up
- Browser RDP, VNC, and SSH — open a terminal or remote desktop to any device behind the tunnel straight from the ProxyLink dashboard. No client software, no open ports on your side.
- Proxy links — share an HTTPS URL that forwards to any internal web interface (NAS, NVR cameras, PBX admin panels, router UIs) with ProxyLink login in front of it.
- No public exposure — the device keeps zero open ports and needs no static IP. The tunnel is outbound-only WireGuard to EU-hosted infrastructure. Read more about agentless remote access and NIS2 compliance.
Ready to connect?
Create a free account and set up your first tunnel in minutes. Free during early access — no card required.