Wireguard Client exklusive SSID [SOLVED]

[boris099]

I would like to create a separate SSID which is permanently serving Wireguard outgoing VPN.

WG client and server are up and running.
PBR is running as well.
Currently using PBR policies to push clients with their MAC into the VPN.
This is cool cause you can catch WLAN and LAN devices - but kind of unflexible for WLAN devices you would like to run usually Non-VPN and only would like to have the possibility to choose a VPN for special purposes.

Now I need some support cause not yet fluent O-WRT:-) - what is the easiest way to create a separate SSID and assign that best to the running wglient interface and device (both named wglient), is that possible?

[darksky]

Create a SSID/Interface that will use a commercial VPN

That looks good. But take note your wg server (wg0) needs the WAN to be default gateway (or have its port routed via the WAN) To make sure you do not set the WG client (wg1) as default gateway disable "Use default gateway" on the Advanced page of the wg1 interface ( option defaultroute '0') Then you use PBR to route the interface of your choice via wg1

[boris099]

Setup Wireguard server and client on 24.10.1 [SOLVED]

Hi, need to add here one question. Earlier we discussed the possibility to assign a whole @device as source to PBR. I do have a guest network running using the SSID IoT on VLAN br-lan.3 Can I just add this @br-lan.3 as device and assign to wgclient in PBR policies and add additionally the two PBR DNS Policies as already running for the single devices? Will each device connected to SSID IoT run via the wgclient? And can I still use the single LAN MAC devices at the same time?

I was having another discussion about that Wiireguard client&server, there I aslo could solve that issue