Hello everyone,

Have successfully configured a Wireguard VPN Interface and Peer with a third-party VPN Vendor, like: ProtonVPN, Mullvad, etc.

It works as expected when setting the Allow Address of the Peer to 0.0.0.0/0.

When set to 0.0.0.0/0, it routes all network traffic through the router for all VLANs.

But, if the Allow Address is set to an existing VLAN Subnet, like 192.168.10.0/29 it doesn't work.

So, the idea is to route all internet traffic of devices in one VLAN out of the 5 we have, to use the Wireguard VPN Peer.

The other VLANs must have normal internet traffic and only devices of the 192.168.10.0/29 subnet must go through the Wireguard VPN to browse the internet.

What is the proper configuration? What is needed? ACL, Static Route or Policy Routing? How to do it?

Any help would be greatly appreciate it. 

TL-SG2210MP v3.0

Switch: 3.0.6 Build 20230602 Rel.73473

Omada Controller: 5.12.9

Firmware: 2.11.3 Build 20230906 Rel.36272