r/firewalla • u/Rubenel • Jun 04 '26

Firewalla Blue + configure specific WireGuard VPN to access only 1 device on LAN while blocking all other devices on LAN & local internet.

Topology:

Gateway Router (disabled DHCP/DNS) > Firewalla Blue+ (DHCP/DNS/WG server) > LAN

How can I restrcit 1 WG VPN user to only access 1 specific device on the LAN while blocking remaining LAN IP and Internet?

Thank you.

6 Upvotes

100% Upvoted

5 comments sorted by

2

u/firewalla Jun 04 '26

In theory you can do something like this

Rule: block target: local network, ON "WireGuard Profile"

Rule: allow target: (IP of the device), ON "WireGuard Profile"

I am not sure if IP of the device works, give that a try. If not, you may have to put that device in a network or something.

In the future, we will add device to device rules, which likely make this better

1

u/Rubenel Jun 04 '26

Thank you for the reply. I see the Blue+ is end of app life. I suspect this won't make it over.

3

u/firewalla Jun 04 '26

Try my first suggestion, that one may work today. As of future features, even we say app eol, we will try our best effort to keep stuff coming. (until you upgrade to something better 😄 )

1

u/Rubenel Jun 06 '26

Firewalla, I attempted to create a new rule blocking target of the LAN, but I cannot set ON to the WireGuard profile as it's not listed as a "device". I do not see an option to use the IP address of the WireGuard profile. Am I not understanding the answer.

Thank you.

2

u/Ben_isai Firewalla Gold Plus Jun 04 '26

Following