Wireguard VPN - Subnet Remote LAN Restriction

I also tried setting on wgserver. It's much more complicated. That's because the wgserver can't distinguish wgclient's LAN clients with "WireGuard Client Options - IP Masquerading" on.

The steps are:

  1. client: turn off wgclient IP Masquerading
  2. server: add WireGuard Server Route Rule
  3. server: add firewall rule at luci

1 Like