Customers¶
What it's for¶
A customer groups clients that belong together — a company, a site, a team — and carries the VPN settings they share. Even if you manage just one organization, it lives in one customer. The customer Details page has tabs: Overview, General, Integrated Server Pro, Networks & External, and Endpoints.
How to use it¶
Create a customer on Admin → Customers → Add: a name and a short client prefix are all that's required.
Choose the server mode. Each customer is either External — you
upload WireGuard® .conf files per client by hand — or Valenius
Pro — the integrated server provisions peers
automatically. Setting up the latter is a guided one-time task:
Integrated WireGuard® server.
Set the shared VPN defaults (Networks & External tab): allowed IP ranges, DNS server, and trusted networks for all of this customer's clients. Individual clients can override these on their own Details page — the client value always wins over the customer default.
Allow user config uploads. If enabled, this customer's users may upload
their own .conf files through the tray app — useful for power users,
off by default.
Pair mobile devices from the Endpoints tab — see Device pairing.
Share the integrated server across customers Pro: two switches — allow sharing on the customer that owns the server, allow receiving on the other — let a client of one customer also get a VPN profile from another customer's server. Both must be on.
Per-customer license Pro: MSPs enter each customer's license key on the customer's page; the license state is shown alongside.
Pitfalls¶
- Client overrides beat customer defaults. If one device behaves differently from the rest, check its own Details page for a per-client value before touching the customer settings.
- The integrated server's internal subnet must be unique per customer. The admin panel warns you when a new setup collides with an existing customer's — pick a different subnet then; a colliding one degrades tunnel verification.
- Switching server mode is not a casual toggle. Moving away from the integrated server removes automatic provisioning for every client of the customer; plan it, don't experiment on a live customer.