UniFi - How to allow WireGuard Remote Users to access networks across IPsec Site-to-Site VPN Tunnels

Alex Lowe

Last updated: October 9, 2026
If you want fast and reliable UniFi hosting, check out HostiFi with expert support, regular backups, managed updates and prices from $19 per month.

To learn more about our hosting plans, create an account or book a free demo to get started.
  1. Create your WireGuard VPN users on your Main site
  2. Create your IPsec Site-to-Site VPN tunnels between Main and Other sites
  3. Edit your WireGuard VPN user configs and add the remote networks to the AllowedIPs like this:AllowedIPs = 192.168.3.1/32, 192.168.3.3/32, 0.0.0.0/0, 10.30.10.0/24, 192.168.1.0/24
  4. Edit your IPsec Site-to-Site VPN tunnels for Other sites only, and add the WireGuard VPN network as a Remote Network subnet

About HostiFi

HostiFi provides hosting for Ubiquiti software platforms, with servers for UniFi and UISP. We also offer network consulting, with HostiFi Professional Services.

Get the Ubiquiti Top 20

Each month our team sifts through Ubiquiti news and content from around the web and delivers 20 of our favorite links to your inbox.

View recent issues

No spam. Unsubscribe anytime.

🤩

Discovered 3+ things that I did not know and will have a material impact on my business.

Newsletter Subscriber

🤩

All the info I want/need in a single clean thread! Perfect!

Newsletter Subscriber

🤩

Providing super valuable information to keep the community in the know. Awesome links page, Thank You.

Newsletter Subscriber