Netclient Setup

The Netclient manages WireGuard on client devices (nodes). This document walks through setting up the netclient on machines, including install, management, and uninstall.

The netclient is supported on the following operating systems: - Linux (most distributions) - Windows - Mac - FreeBSD

For unsupported devices, please use the external client, wich is just a static, vanilla, WireGuard configuration file, which can be added to any device that supports WireGuard.


Before adding the machine to a network, the netclient must be installed. A successful installation sets up the netclient executable on the machine and adds it as a system daemon. The daemon will listen for changes for any network it joins.

The client install does not add the client as a member of any network. Once the client is installed, you must run:

netclient join -t <token>

The following are install instructions for most operating systems.


Debian Distros (debian/ubuntu/mint/pop-os)

curl -sL '' | sudo tee /etc/apt/trusted.gpg.d/netclient.asc
curl -sL '' | sudo tee /etc/apt/sources.list.d/netclient.list
sudo apt update
sudo apt install netclient

Red Hat Distros (fedora/redhat/centos/rocky)

curl -sL '' | sudo tee /tmp/gpg.key
curl -sL '' | sudo tee /etc/yum.repos.d/netclient.repo
sudo rpm --import /tmp/gpg.key
sudo dnf check-update
sudo dnf install netclient

Arch Distros (arch/manjaro/endeavouros)

yay -S netclient


PowerShell script

. { iwr -useb } | iex; Netclient-Install -version "<your netmaker version>"

MSI Installer

Download Link:


Brew Install

brew tap gravitl/netclient
(optional) brew audit netclient
brew install netclient

GUI Installer

Download Link:


A FreeBSD package is coming soon. In the meantime, please use this install script:

curl -sfL | VERSION="<your netmaker version>" sh -

Joining a Network

With a token:

netclient join -t <token>

With username/password:

netclient join -n <net name> -u <username> -s api.<netmaker domain>
(example: netclient join -n mynet -u admin -s

With SSO (oauth must be configured):

netclient join -n <net name> -s api.<netmaker domain>

Use the -vvv flag if installation fails and report logs.

Managing Netclient

Connecting/Disconnecting from a network:

netclient connect -n network
netclient disconnect -n network

Leave a network:

netclient leave -n network

List Networks:

netclient list | jq


Leave a network:

Uninstall from CLI:

netclient uninstall

Uninstall using package manager (use equivalent command for your OS):

apt remove netclient