Skip to main content

WireGuard VPN

Install Global Secure Access Client​

Before you can use the client, you must first request a VPN license and access to the relevant site through IT. Once approved, use your ESG account to sign in.

  1. Request a VPN license and access to the specific site from IT.
  2. Open the Global Secure Access Client download page: Global Secure Access Client.
  3. Download the Global Secure Access Client.
  4. Install the client on your device.
  5. Sign in with your ESG account.
  6. Connect to the VPN and then access the relevant site or resource.

Configured VPN connections​

The following WireGuard VPN routes are currently defined and routed through the Azure Firewall.

VPNIP-range
dgec10.240.109.0/24
ordal10.241.67.0/24
aadijk10.240.107.0/24
wlp-charleroi10.241.220.0/24
wlp-ix-evergem10.241.209.0/24
wlp-iv-tessenderlo10.241.208.0/24
hoevelaken-t110.230.1.0/24
hoevelaken-t210.230.2.0/24
hoevelaken-t310.230.3.0/24
gasselternijveen10.240.19.0/24
VPNIP-range
bathmense-landen-t1110.230.4.0/24
bathmense-landen-t1210.230.5.0/24
bathmense-landen-t2110.230.6.0/24
bathmense-landen-t2210.230.7.0/24
rhenus-rotterdam-110.230.15.0/24
rhenus-rotterdam-210.230.16.0/24
rhenus-rotterdam-310.230.17.0/24

Notes​

  • The router is typically configured on .1
  • The logger is typically configured on .101
  • These assets are not reachable via their public ip

Route table context​

These routes are associated with the Azure Firewall subnet and sent to the virtual appliance at 10.250.3.4.