Isnt this done automatically when you enable WG server? I have tested with SlateAX and Flint on 4.1 and it works without having to open the ports on the FW.