[Interface] Address = 10.0.0.1/24 SaveConfig = true PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE ListenPort = <some-high port> PrivateKey = <here-comes-your-server-private-key> [Peer] # client 1 PublicKey = <client1-public-key> AllowedIPs = 10.0.0.2/32 [Peer] # client 2 PublicKey = <client2-public-key> AllowedIPs = 10.0.0.3/32