Using Wireguard to Protect Intranet Networks on Mobile Devices

Keywords:
Wireguard, Mobile VPN, Intranet Access, RBAC, GIS

Abstract:
Field teams often need secure access to intranet services while working over LTE/5G or public Wi-Fi. In that setting, the challenge is not only encryption, but limiting exactly what a mobile device can reach and keeping that behavior predictable when the network changes. This paper examines WireGuard as a practical solution for that problem. The proposed design uses a WireGuard gateway as the only external entry point to the intranet and combines peerspecific addresses, AllowedIPs, and firewall rules to keep access aligned with user roles. A prototype with 10 mobile clients was evaluated through scenarios that reflect real use: access to internal GIS services, Wi-Fi↔LTE handover, tunnel interruption, and leakage checks. The results show that the approach can protect internal services while remaining usable in day-to-day mobile work.

CITATION:

IEEE format

Copy to clipboard

N. Petrović, D. Viduka, V. Nikolić, “Using Wireguard to Protect Intranet Networks on Mobile Devices,” in Sinteza 2026 - International Scientific Conference on Information Technology, Computer Science, and Data Science, Belgrade, Singidunum University, Serbia, 2026, pp. 348-353. doi:10.15308/Sinteza-2026-348-353

APA format

Copy to clipboard

Petrović, N., Viduka, D., Nikolić, V. (2026). Using Wireguard to Protect Intranet Networks on Mobile Devices. Paper presented at Sinteza 2026 - International Scientific Conference on Information Technology, Computer Science, and Data Science. doi:10.15308/Sinteza-2026-348-353

BibTeX format
Download

RefWorks Tagged format
Download