Luckily, there exist online calclators that do this for you.

In order to do that, you need to specify all ranges between and around those LAN ranges, which is not a trivial task at all. The problem is that you don't want to allow ranges, you want to exclude ranges! Specifically, you need to exclude all the LAN subnets such as 10.x.x.x, 172.16.x.x and .x. Ranges that are not covered will work directly, outside the VPN. What it actually does is defines which IP ranges should be routed through the WireGuard VPN connection. The AllowedIPs configuration property name is misleading. Update the AllowedIPs property to exclude LAN IP ranges. Import the configuration to the WireGuard client. Pick just one server for starters, the one that the Mullvad client chooses by default (hopefully it's one of the fastest for you). Please note that you don't have to export all servers as the manual suggests. Export a server configuration from Mullvad and import it to the WireGuard clientĪfter log in, configuration exporting is available here: Don't worry, we got you covered!ĭownload the vanilla WireGuard client here: Their tech support recommend using the vanilla WireGuard client, but they refuse to assist configuring it. The Mullvad VPN client does not allow configuring AllowedIPS or DNS.

But I was able to do it using this tutorial: Setting up a self-hosted WireGuard VPN server is wa-a-ay out of scope of this guide. Subscribe to Mullvad VPN if you haven't already or set up a self-hosted WireGuard server

Update the InterfaceMetric of your connections.Ġ.

Add your corporate intranet DNS server to the DNS property.

Update the AllowedIPs property to exclude LAN IP ranges.

Export a server configuration from Mullvad.

Subscribe to Mullvad VPN if you haven't already or set up a self-hosted WireGuard server.

Openvpn mullvad