Setting VPN policy to “ON” was initial step in configuration. Next was to setup Wireguard. I believe if you set VPN not available for Guest Network then guest network should have Internet in all cases (VPN down or up), but this wasn’t the case.