11. Network Peering

Overview

Network Peering allows VPN clients from different networks to communicate with each other. By default, networks are isolated — clients in Network A cannot reach clients in Network B. Peering rules create explicit exceptions.

---

Peering List

Navigate to Networks > Peering.

Network peering rules

Column	Description
Name	Rule identifier
Network A	First network
Network B	Second network
Bidirectional	Whether traffic flows both ways

---

Adding a Peering Rule

Click the + button to create a new peering rule.

Add a new peering rule

Field	Description
Name	Rule name
Network A	First network
Network B	Second network
Bidirectional	If enabled, both networks can reach each other. If disabled, only A can reach B.

After adding a rule, the panel shows a warning to apply the firewall.

Peering rules updated — 3 rules configured

Click Apply Firewall to activate the new rules.

Warning: Peering rules changed, click Apply Firewall to apply

Applying firewall rules with countdown

---

Use Cases

Office-to-Office Communication

Connect clients from two office networks:

• office_us (10.0.1.0/24) ↔ office_eu (10.0.2.0/24)
• Bidirectional: Yes

Server Access from VPN

Allow VPN clients to access a management network:

• vpn_clients (10.100.1.0/24) → servers (10.0.0.0/24)
• Bidirectional: No (clients access servers, but not vice versa)

IoT Monitoring

Allow monitoring network to reach IoT devices:

• monitoring (10.0.3.0/24) → iot_devices (10.0.4.0/24)
• Bidirectional: No

---

How It Works

Peering rules create iptables FORWARD rules that allow traffic between the specified network subnets. Without peering, the default auto_isolation_ipset rule in Pre-Network Rules drops inter-network traffic.

---