Built-in VPN

Your Gateway Includes a VPN Server.

No subscription. No third-party service. Every Sertone gateway ships with a built-in VPN server. Generate a config file in your admin panel and connect any device in under two minutes.

What You Get, Out of the Box

🔒
Secure remote access

Manage your gateway from anywhere as if you were on the same local network — without exposing it to the public internet.

📱
Up to 253 devices

Laptops, phones, tablets — each gets its own config. Revoke a device at any time from your admin panel.

🌐
Works everywhere

The same config file works on Windows, macOS, iOS, Android, and Linux. Free VPN client apps on every platform.

💸
No extra cost

The VPN server is part of your gateway. You are not paying for a VPN service — you own the server.

Live Connection Demo

See what connecting a device to your gateway looks like. Click a device to simulate connecting it.

💻
Your Laptop
Anywhere in the world
Not Connected
Encrypted Tunnel
🖥️
Your Gateway
Your server, your admin panel

Connected devices

💻
Laptop
📱
Phone
📟
Tablet
🖥️
Office PC
🍓
Pi
Gateway VPN server running — waiting for connections

Simulation only — demonstrates the connection flow you will see in your WireGuard client.

Connect a Device in 3 Steps

Step 1 — Get your config file from the admin panel

Open your gateway's admin panel → Settings → VPN. Click Generate config. A .conf file downloads to your device. Each device gets its own file — do not share them.

Step 2 — Install the WireGuard app

Download the WireGuard installer from wireguard.com/install and run it. No account required. Completely free.

Install WireGuard from the Mac App Store (search "WireGuard") or via Homebrew: brew install wireguard-tools. Both are free.

Install the WireGuard app from the App Store. Search for "WireGuard" — it is published by WireGuard Development Team. Free.

Install the WireGuard app from Google Play. Search for "WireGuard". Free. Also available from F-Droid if you prefer.

Install WireGuard from your package manager. Examples:
Ubuntu/Debian: sudo apt install wireguard
Fedora: sudo dnf install wireguard-tools
Arch: sudo pacman -S wireguard-tools

Step 3 — Import and connect

Open WireGuard → click Import tunnel(s) from file → select the .conf file → click Activate. You are connected.

Open WireGuard → click Import tunnel(s) from file… → select the .conf file → click Activate. You are connected.

Open WireGuard → tap + → Create from file or archive → select the .conf file. Tap the toggle to connect. iOS will ask for VPN permission — tap Allow.

Open WireGuard → tap + → Import from file or archive → select the .conf file. Tap the toggle to activate. Android will ask for VPN permission — tap OK.

Bring the tunnel up with: sudo wg-quick up /path/to/your-device.conf
To make it start on boot: sudo systemctl enable --now wg-quick@your-device

Full VPN Documentation Gateway Installation

Managing Connected Devices

From Settings → VPN in your admin panel you can see every device, when it last connected, and whether it is currently active.

VPN Devices (4 connected) + Generate config
Device Status Last seen Actions
💻 My Laptop ● Active Just now Revoke
📱 iPhone ● Active 2 min ago Revoke
🖥️ Office PC ○ Offline 3 days ago Revoke
📟 iPad ● Active 18 min ago Revoke

Revoking a device immediately invalidates its config. It cannot reconnect unless you generate a new config for it.

← All Demos High Availability Demo →