Guest LAN can't access internet after VPN change

[aakelley]

I recently moved from PIAVPN to Mullvad. Everything went easily with the change except one thing: my guest network can no longer access the internet after the change. I spent about 4 hours this morning looking at logs and trying to determine the source of the problem and the furthest I could get is some strange entries in the states table that seems to show that the traffic is going out one interface and back via another:

This doesn't seem right to me, although I may be barking up the wrong tree. If the above is indeed the sign of the issue, what might the issue be?

Clients on the guest network can:

• lookup IPs via DNS
• ping internet resources (8.8.8.8 for example)

Clients on the guest network cannot:

• ping the gateway interface (192.168.20.1)
• connect to anything in a browser

Details of my setup:

• Guest network is all over wifi via a few Unifi APs with clan tagging.
• Have a main network with partioned IPs: below .50 bypasss VPN, above .50 routes over VPN
• All guest network connections are supposed to bypass VPN