How to prevent wireguard VPN client to access local network resources?

[hansome]

Please refer to:

Private network for devices connected to VPN Server on the Beryl AX

Add firewall rule like this in luci: [image] 10.0.0.2 is the wireguard client, 192.168.173.1 is the target IP which is not allowed for 10.0.0.2 client.