Zyxel WireGuard Setup Guide
Most Zyxel routers (NBG series, USG with ZLD firmware) have no WireGuard support at all. The USG FLEX H with uOS has Tailscale integration only (not standard WireGuard). Recommended: place a GL.iNet router on your LAN.
Check your Zyxel model
USG FLEX H series (uOS): Has Tailscale only — this is a managed WireGuard mesh, not compatible with ProxyLink.
USG FLEX / ATP / VPN series (ZLD firmware): No WireGuard support at all. Only IPSec, SSL VPN, L2TP.
NBG consumer series: No WireGuard support.
Recommended approach: GL.iNet behind Zyxel
The simplest solution for any Zyxel router:
- Buy a GL.iNet travel router (GL-MT3000, GL-AXT1800, etc.)
- Plug it into a LAN port on your Zyxel
- Connect your devices (or put the GL.iNet in AP mode to cover the whole LAN)
- Follow the GL.iNet setup guide
Alternative: WireGuard on individual devices
Install WireGuard directly on each device you want to expose (e.g. a Synology NAS, a Raspberry Pi, a PC). Follow the Synology guide or the standard Linux WireGuard setup.
Good to know
What you get once the tunnel is up
- Browser RDP, VNC, and SSH — open a terminal or remote desktop to any device behind the tunnel straight from the ProxyLink dashboard. No client software, no open ports on your side.
- Proxy links — share an HTTPS URL that forwards to any internal web interface (NAS, NVR cameras, PBX admin panels, router UIs) with ProxyLink login in front of it.
- No public exposure — the device keeps zero open ports and needs no static IP. The tunnel is outbound-only WireGuard to EU-hosted infrastructure. Read more about agentless remote access and NIS2 compliance.
Ready to connect?
Create a free account and set up your first tunnel in minutes. Free during early access — no card required.