How do I disable VPN when on my local network?

VPN Forum
1

I configured always-on VPNs on our phones using Wireguard. I’d like them to disable themselves when on our local network. Is this possible?

2

I don’t have an android device, so I’m unsure if it works the same there. As for iOS, try the steps as follows.

  • Open the WireGaurd App
  • Select desired profile
  • Select Edit and scroll down
  • Enable On-Demand if not enabled already
  • Enable Cellular (if desired), enable WiFi
  • Select Except These SSID’s
  • Enter desired SSID’s (remember these are case sensitive, enter exact information)
  • Press back and press save.

Configured this way, VPN connection will always be connected UNLESS you are on your desired network.

Hopefully it is relatively the same for Android.

3

iOS supports on demand.

4

iOS supports on demand, the equivalent of always on but in compliance with the app’s terms. If wiregaurd doesn’t tell iOS to disconnect, then it’s always on.

5

Rather silly that they do things so differently, not sure why it is like that. Maybe iOS or Android have different policies or something, i have no idea. I explained the steps for iOS here.

6

It’s an Option on the IOS version and not the Android version.

7

launch wireguard app on your iOS app

Tap on the wireguard profile

tap top right ‘edit’

and look for on-demand

8

That sounds very tiresome…

9

iOS has on demand activation in WireGuard settings. I have mine set to turn WireGuard on whenever I am not connected to my home Wi-Fi. Does it transparently and easily. You can also specify if you want this on demand for other Wi-Fi and/or Celluar individually.

10

jesus that’s worse than ios shortcuts

11

Yep was a pleasant change when I moved to an iPhone

12

It’s super convenient. In WireGuard, you just open the config for your VPN profile, turn on on-demand, and enter your home SSID(s) in the exception list. These settings stay active through reboots and force closing the WireGuard app. It works just the same on Mac OS. It’s completely transparent and seamless for the end-user. The only way it could be easier is if you could configure these settings when provisioning the client in Firewalla.