Wireguard Support in RADIUSdesk

• As of November 2025, RADIUSdesk can centrally manage Wireguard running on Ubuntu and Raspberry Pi based devices.
• The Wireguard Servers applet declares and manages one or more instances of Wireguard on these devices.
• The device runs a lightweight agent which interacts with RADIUSdesk.
• The agent also reports back to RADIUSdesk on the status of Wireguard and any active peer connections.
• The following graphic shows how everything fits together.

• Wireguard Servers can be found under the Other → VPN & Tunneling grouping.
• It has two tabs
  • The Servers tab displays all of the Wireguard servers which are managed centrally.
  • The New Arrivals lists Wireguard servers that reported to RADIUSdesk but which require on-boarding.

• When you add a Wireguard server, you will need the following information from the server where the agent is installed on.

• MAC Address is used to uniquely identify the server.
• IP Address will be used in the peer configuration to specify the IP Address where a peer needs to connect with.
• Uplink Interface is used for the firewall rules when NAT is specified on a Wireguard instance.

Each Wireguard server will have one or more Wireguard Instances associated with it.

We will cover Wireguard Instances next.

• After you defined a Wireguard Server, you can add Wireguard Instances belonging to the Wireguard server.
• One of the requirements that our clients had was the ability to control the bandwidth on Wireguard.
• Wireguard Instances allows for this as well as the ability to specify it as a NAT breakout point.

• With each Wireguard Instance you can in turn manage the Wireguard Peers for the specific Wireguard Instance.

• The config of each Wireguard Peer that has been defined can be downloaded or a QR Code generated for easy configuration.

• Any of the Wireguard servers that still needs on-boarding will be listed under New Arrivals.
• Simply select the one you want to on-board and provide the required information to allow it to become part of the managed servers.
• Reboot the device after on-boarding and the configuration will be applied through the RADIUSdesk Wireguard agent.

• Be sure to check out the steps to follow on the Ubuntu or Raspberry Pi to install the RADIUSdesk Wireguard agent so it can be managed by RADIUSdesk.