In the "Services > VPN > Settings" menu, you can define the default settings for newly created VPN connections. The settings stored there apply to both IPSec and WireGuard connections.

For the server address, it is recommended to use the full hostname for connections from the Internet.

Select a firewall ruleset that allows the access to the local network that is usually desired for VPN clients.

Each VPN client is assigned an individual, virtual IP for the VPN connection. This must be outside all local networks, routings and other VPN connections. Enter the IP for the first VPN client under "Base IP address for single devices". All other VPN clients are assigned consecutive IPs.