How to force all traffic of lan/subnet through tunnel
-
I currently have a working Site-to-Multisite Wireguard setup that only routes traffic to/from HQ and each of the 25 remote sites (hub and spoke). The only traffic At one location we hare having issues with the ISP's public ip address being blocked for a service they need. I need to route all traffic from the remote site's LAN though the HQ to resolve HQ's static IP back at the remote site, but there is several other VLAN's/subnets that cant be routed down the VPN and must go out the ISP's at the remote location.
Anyone know how I can route all traffic on the LAN subnet over the Wireguard tunnel so the resolve the HQ's external IP without affecting the other VLAN's? The documentation I used to set up the Site-to-Multisite is linked above.
-
UPDATE: I tried policy based routing the WAN interface to use the Wireguard gateway but no devices can reach the internet.
-
SOLVED
All I had to do at the remote site was change the allowed IP's to 0.0.0.0/0 in the peer, then change the LAN "allow all" rule to the gateway to the wireguard vpn.