> For the complete documentation index, see [llms.txt](https://documentation.nomos-system.com/nomos-system/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.nomos-system.com/nomos-system/integrator-en/administration/vpn.md).

# Direct-VPN

With the Direct VPN you can securely reach your nomos system controller from outside your local network. The connection is based on WireGuard: every device that needs access receives its own VPN configuration.

{% hint style="info" %}
The Direct VPN provides permanent access via your own VPN clients — usable by you or an authorised person such as your integrator. For simple, on-demand support access without setting up a client, there is the separate [Support VPN](/nomos-system/integrator-en/administration/support-vpn.md).
{% endhint %}

## Enabling the Direct VPN

1. Click **"On"** at the top right.
2. Enter a **Partner Name** and confirm. The status changes to **"Waiting for confirmation"** until the connection is established.
3. Once the connection is up, the banner shows the status **"Available"** together with the assigned **IP Address**.

{% hint style="warning" %}
When you turn the Direct VPN off, all configured VPN clients are removed.
{% endhint %}

## Adding a VPN Client

A client is a device (for example a laptop or smartphone) that accesses the controller through the Direct VPN.

1. Click **"Add Client to VPN"** and assign a name.
2. A WireGuard configuration is generated and displayed as a **QR code**. Scan it with the **WireGuard app** or download the configuration file (`.conf`).
3. The **VPN Clients** overview lists all clients along with their online status. You can remove individual clients there.

{% hint style="warning" %}
The configuration can only be retrieved once. After you close the window it can no longer be downloaded — in that case simply create a new client.
{% endhint %}

{% hint style="info" %}
You can get the free WireGuard app for your device at [wireguard.com/install](https://www.wireguard.com/install/).
{% endhint %}

## VPN Port Forwarding

Using **"Expose local device to VPN"** you make a single device from your local network reachable over the Direct VPN. This lets you access specific devices individually without exposing your entire network.

<figure><img src="/files/2OUTZN03XsPA1FF327HK" alt="" width="563"><figcaption></figcaption></figure>

{% hint style="info" %}
A USB serial adapter connected to the controller can be shared via [USB Serial over VPN](/nomos-system/integrator-en/administration/usb-serial-vpn.md) — for example for remote programming.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://documentation.nomos-system.com/nomos-system/integrator-en/administration/vpn.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.