I have the following setup on my Beryl router:
-
Devices that need VPN are connected via Guest network. VPN policy routes all their traffic through WireGuard connection.
-
All other devices are connected to the regular wifi network.
Now, I would like to add Tailscale connection as a backup to the existing WireGuard connection. The reason for Tailscalee is that the new provider has CGNAT so I cannot use WG.
Question is how can I have Tailscale working as a failover connection? VPN policy has no option to add it besides WG and I don't want to route all my other trafic through it.