UniFi WireGuard VPN server setup and Firewall rules for remote deskop access
https://www.unihosted.com/
🔒 In this video, Fernando from UniHosted demonstrates how to deploy a secure WireGuard VPN on your UniFi Gateway for remote RDP access. We cover two distinct scenarios: a standard setup for remote workers and an advanced Bastion Host (Jumpbox) configuration for system administrators.
You’ll see step-by-step how to configure the WireGuard server, manage clients, and most importantly, implement strict firewall rules. We move beyond the default "open" VPN zone to create a secure Split Tunnel environment, ensuring users only access what they need while blocking unauthorized internet or gateway traffic.
🔹 What you’ll learn:
✅ How to set up a WireGuard VPN Server on UniFi Cloud Gateways
✅ Configuring Firewall Rules to restrict VPN access (Split Tunneling)
✅ Setting up DNS resolution for internal FQDNs over VPN
✅ Implementing a Bastion Host / Jumpbox network for secure admin access
📌 Chapters:
00:00 – Intro: Remote RDP Access & Viewer Request
01:28 – Lab Topology: UCG Ultra & Virtual Machines
03:05 – Pre-requisites: CGNAT, Static IPs & Port Forwarding
06:50 – Configuring the WireGuard VPN Server
11:15 – Creating & Downloading Client Configurations
13:48 – Setting up the Windows WireGuard Client
16:10 – Full Tunnel vs. Split Tunnel (AllowedIPs Explained)
19:40 – Firewall Rules: Blocking Inter-VLAN & Allowing RDP
24:45 – Security: Blocking Gateway Management Ports
31:18 – Configuring DNS for Internal Name Resolution
33:55 – Recap: Scenario 1 Firewall Rule Summary
36:20 – Scenario 2: Intro to Bastion Hosts / Jumpboxes
39:40 – Creating a Bastion Zone & Strict Firewall Rules
48:40 – Testing the Secure Jumpbox Connection
53:15 – Using UniFi Insights & Logs for Troubleshooting
54:12 – Outro
🚀 Host your UniFi Controller in the Cloud with UniHosted!
We provide fully managed UniFi hosting with security, backups, and support.
✅ UniHosted – Managed UniFi Hosting
🔹 Reliable cloud hosting for UniFi controllers
🔹 Secure & scalable for MSPs and IT pros
🔹 Daily backups, SSL encryption, and 24/7 uptime monitoring
💡 Learn More → https://www.unihosted.com/
💬 Got questions or testing results to share? Drop a comment below! 👍 If this helped, Like & Subscribe for more weekly UniFi tutorials.