How to access WireGuard Server LAN device via domain name from the client side?¶

This tutorial introduces the steps to access your home devices (such as NAS, IP camera, etc.) on your WireGuard server side by their domain names from the client side.

Topology¶

As shown below, you can access the devices such as NAS and IP camera on the WireGuard server’s LAN via their domain names from the PC on the client side.

topology

Setup Steps¶

1. Edit Hosts on Server¶

Log in to the web admin panel of your VPN server router, navigate to NETWORK -> DNS -> Edit Hosts.

edit hosts

Input the IP and domain name of the home devices you want to access, then click Apply.

input ip domain

2. Allow Remote Access LAN on Server¶

For server router running firmware v4.8

In your server's admin panel, go to VPN -> WireGuard Server, click Options at the upper right corner.

server options 4.8

Enable Allow Remote Access the LAN Subnet, and click Apply.

server allow access lan 4.8

Once enabled, it means allowing remote access to this router (tunnel IP) and LAN devices through the VPN.

For server router running firmware v4.7 and earlier

In your server's admin panel, go to VPN -> VPN Dashboard -> VPN Server section. Click the cog icon at the right side of the WireGuard server.

server options 4.7

Enable Remote Access LAN, and click Apply.

server allow access lan 4.7

Once enabled, resources inside the LAN subnet of the WireGuard Server can be accessed through the VPN tunnel.

3. Export VPN Configuration¶

In the server's admin panel, go to VPN -> WireGuard Server -> Profiles tab, export a configuration profile.

export config

You will obtain a file with the .conf extension, as shown below.

downloads

Open this .conf file. Ensure that the DNS field in the file points to the server’s tunnel IP, which is displayed under the Configuration tab of the WireGuard Server page, as shown below.

Delete "64.6.64.6" from the DNS field if any to avoid DNS resolution failure.

dns field