I have set up a WireGuard tunnel to my VPS using "Policy Mode". It routes traffic from a specific device on the local network. This works perfectly. However, the device itself cannot access the local network while it is in the tunnel. Previously, I had the AT-1800 Slate Router, which ran in “Global Mode.” In this configuration, the device could easily access the local network while connected to the tunnel.
How can I configure the "Policy Mode" so that the specific devise has access to the local network while connected to the VPN tunnel?
I don't know but if 192.168.10.0/24 is your (primary) LAN & not your guest network, you've set it to never use the VPN. 192.168.8.0/24 is the default primary LAN, 192.168.9.0/24 is the guest. That's just a FYI for others reading along.
What I might recommend is putting some IP checking domains into a white/blacklist, one per ea. VPN policy, so you can confirm everything is as expected when checking from client devices. Here's some popular ones:
I would like to clarify that, for example the Client A and Client B are both in a VPN rule "From - Specified Devices".
When this VPN tunnel (rule) is enabled, can Client A not access Client B through LAN IP?
