Finally! The solution was creating a firewall rule that route the traffic of my Bridge interface through the gateway i have created for the wireguard client.

When you said Meraki mesh, I assume you have multiple sites using Meraki? If so, you need to make sure your local pfsense has ipsec to the site where the 10.1.0.0/24 subnet is.

Update 2: Added an alias for RFC1918 networks and configured an outbound NAT rule with RFC1918 as source and any destination on all pfSenses. This solved what seemed like a routing problem but turned out to be a NATing problem. However I'll probably have issues if/when I have multiple WAN connections. Still would like to hear if there are any best practices.

We're also experiencing this issue (https://forum.netgate.com/topic/164671/bug-dhclient-flushes-static-routes). Our current theory is that the DHCP client is to blame. A workaround it so go static: set the interfaces configuration to static and also set the gateway manually. We stopped having this issue after that.

@vistatech said in routing specific packets through IPSEC gre tunnel: 10.1.1.20 Hey And why is outgoing NAT used ? Try disabling it . I have a similar scheme and everything works fine without NAT. The question such, Pfsense can ping a host 10.1.1.20 ?