Hello

The following WireGuard Setup is smoothly running on my TP-Link ER605.

[192.168.1.0/24] -> [192.168.1.1] -> [WireGuard Interface/Peer] => [==VPN Tunnel==] => [Internet].

All traffic from my local network is routed thru the tunnel.

My aim: I want that only traffic from specific LAN hosts will be routed thru the tunnel.

[192.168.1.2, 192.168.1.3, 192.168.1.4] -> [192.168.1.1] -> [WireGuard Interface/Peer] => [==VPN Tunnel==] => [Internet].

[192.168.1.5, 192.168.1.6, 192.168.1.7] -> [192.168.1.1] -> [WAN].

I already tried with defining [IP Group, IP Address] and using this with policy based routing. But still the whole subnet is routed thru the tunnel.

How can I achieve this?

Thanks.