WireGuard client VPN: Clients Can't Access Internet on VPN-Enabled SSID

[egc]

Your build is old and EOL so not sure what will work and what not.

You PBR is also old and if your only intent is to route one interface (gianelle) through the VPN we can try with a simple netifd setup.

Start with making a backup so you can go back to this config

Stop the PBR app.

Remove this rule it should not be necessary:

@agccapital

config rule
    option name 'Allow_Wireguard_OUT'
    option proto 'udp'
    option src '*'
    option dest 'wan'
    option dest_ip 'wg.starzone.io'
    option dest_port '1276'
    option target 'ACCEPT'

Remove the option route_allowed_ips '1' , this will route everything default through the WAN:

@agccapital

config wireguard_wg0 'wgserver'
    option public_key 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'
    option endpoint_host 'wg.starzone.io'
    option endpoint_port '1276'
    option route_allowed_ips '1'      <<<<< REMOVE
    list allowed_ips '0.0.0.0/0'
    list allowed_ips '::/0'
    option persistent_keepalive '25'

Remove this:

@agccapital

config rule 'gianelle_rule'
    option in_interface 'br-gianelle'
    option lookup 'wg0'
    option priority '100'

config route
    option interface 'wan'
    option target 'wg.starzone.io'
    option gateway '10.0.0.1'

Next we make a table with default route via the wg interface:

config route
	option interface 'wg0'
	option table '102'
	option target '0.0.0.0/0'

and a rule to bind interface gianelle with this table:

config rule
	# for interface
	option in 'gianelle'
	option lookup '102'

Interface gianelle already has a forward to the VPN zone in the firewall but not to the WAN so this interface will only work via the VPN and not via the wan if that is your intent then fine

Reboot your router and test.
If it does not work please show the following and redact keys, passwords, MAC addresses and any public IP addresses you may have:

cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall
ip route show
ip route show table all
ip rule show
wg show

Again not sure if this will work on your old build.