Skip to main content

MacOS Operating System

This guide explains how to install and configure WireGuard on MacOS to connect to the Helium VPN Server.

Installation Steps

  1. Install the WireGuard application from the App Store
  2. Open WireGuard and select Import tunnels from file
  3. Select the VPN Client configuration file that you previously downloaded. Once the import is successful, the configuration will appear in the tunnel list
  4. Click Activate to connect to the Helium VPN Server Activate VPN Capture

Configuration Steps

  1. Configure the WireGuard tunnel access to allow it to reach the target subnet that you entered in Helium Cloud
  2. Example Using the en0 Interface (check using the ifconfig command)
    • Create a NAT configuration:
      sudo nano /etc/pf.anchors/com.helium-nat
    • Add the following configuration:
      nat on en0 from 10.250.0.0/24 to any -> (en0)
    • Add the PF configuration:
      sudo nano /etc/pf.conf
    • Append the following lines at the end of the file:
      anchor "com.helium-nat"
      load anchor "com.helium-nat" from "/etc/pf.anchors/com.helium-nat"
      pass in on utun0 from 10.250.0.0/24 to any
      pass out on utun0 from any to 10.250.0.0/24
    • Validate the configuration:
      sudo pfctl -nf /etc/pf.conf
    • Restart the PF service:
      sudo pfctl -F all -f /etc/pf.conf
      sudo pfctl -e
    • Enable IPv4 forwarding:
      sudo sysctl -w net.inet.ip.forwarding=1

Verification

  • Ensure that your server can successfully PING the following destinations: