# Mango as a Wireguard VPN appliance at a remote site **URL:** \ **Category:** Router\ **Created:** [June 7, 2024, 5:56am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300 "2024-06-07T05:56:55Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![pstretch](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/c37758/32.png) [@pstretch](https://forum.gl-inet.com/u/pstretch)\ **Post date:** [June 7, 2024, 5:56am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/1 "2024-06-07T05:56:55Z")
I'm hoping to create the setup shown below, using a Mango as a VPN appliance at a remote location so that all client traffic is tunnelled to my local LAN. ![network](https://forum-static.gl-inet.com/original/3X/b/7/b7f1c6f101170a0b768ee97302b2e8f6e2511b49.png) I have one remote client device that does not support WireGuard client or Wi-Fi, so I need a VPN appliance with ethernet to the client and Wi-Fi to the remote router. The Mango needs to connect to the remote site's Wi-Fi, with a client connected by ethernet. I already have my local router running WireGuard okay with other clients running as WireGuard peers. What would be the best way to setup the Mango to achieve this, please? Any config tips? Thank you ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [June 7, 2024, 5:57am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/2 "2024-06-07T05:57:44Z")
> [@pstretch](#): > > What would be the best way to setup the Mango to achieve this, please? Any config tips? Exactly like the image shows. You just need to connect the Mango via Wi-Fi and enable WireGuard. ---
**Author:** ![pstretch](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/c37758/32.png) [@pstretch](https://forum.gl-inet.com/u/pstretch)\ **Post date:** [June 7, 2024, 7:55am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/3 "2024-06-07T07:55:38Z")
Can I avoid a double NAT by having the Mango in bridge mode? Would WireGuard still work in bridge mode? ---
**Author:** ![hecatae](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/hecatae/32/20467_2.png) [@hecatae](https://forum.gl-inet.com/u/hecatae)\ **Post date:** [June 7, 2024, 9:48am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/4 "2024-06-07T09:48:09Z")
Wireguard would still work in Bridge Mode, any reason you want to avoid Double NAT? ---
**Author:** ![pstretch](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/p/c37758/32.png) [@pstretch](https://forum.gl-inet.com/u/pstretch)\ **Post date:** [June 8, 2024, 7:33am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/5 "2024-06-08T07:33:39Z")
Only that it can cause other problems so is best avoided where possible. If nothing else, itโ€™s another layer of complexity ๐Ÿ˜€ ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [June 11, 2024, 8:42am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/6 "2024-06-11T08:42:27Z")
Consider the drop-in gateway feature in the Mango, to avoid the double NAT, but probably you need to learn how to configure it from GL Docs: > **[How to set up drop-in gateway - GL.iNet Router Docs 4](https://docs.gl-inet.com/router/en/4/tutorials/how_to_set_up_drop_in_gateway/#how-to-set-up-drop-in-gateway-on-a-glinet-router)** > > Documentation for GL.iNet Router Productions ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 11:39am UTC](https://forum.gl-inet.com/t/mango-as-a-wireguard-vpn-appliance-at-a-remote-site/43300/7 "2025-10-29T11:39:35Z")