Hi  @bsz 

Thanks for posting in our business forum.

When configuringthe Wireguard VPN, the Allowed IP on the client side should be 0.0.0.0/0, and the Allowed IP on the server side should be the WireGuard Interface IP of the peer.

For detailed configuration, please refer to the How to configure WireGuard VPN on Omada Router in Standalone mode

• The above guide uses Windows WireGuard software as an example for the client. If using the official Omada VPN software, there is no Allowed IP option, so just simply enable Full Tunnel.

• The configuration is the same for the client using Omada gateway. Please note that the Allowed IP on the client side being proxied should be all zeros, while the Allowed IP on the server side providing the proxy should be the WireGuard Interface IP (i.e., the Local IP Address).

 Hi @bsz 

Thanks for your valuable reply.

There is no policy route on Wireguard. So with Wireguard it is all or nothing when the router is a pure client, while OpenVPN has a bit more choice, you can choose source network which is allowed to access the Internet via VPN tunnel.

For more information about OpenVPN, you can refer to this guide.