WireGuard only for a specific VLAN

[ajaffarali]

I have set up WRT with two networks- the primary LAN and a VLAN. At the moment, both of them are using the primary WAN connection for routing. But what I want to do is set the VLAN to go over WireGuard. I have successfully set up WireGuard using the tutorial at the following link but that makes ALL traffic go over WireGuard.

https://vpn.ac/knowledgebase/125/WireGuard-on-OpenWRT.html

How do I only make the VLAN traffic go over WireGuard and regular traffic through my ISP. Very new to OpenWRT so would greatly appreciate help with screenshots. My firewall screen looks as follows:

[tectonic]

Try VPN Policy-Based Routing + Web UI -- Discussion

[ajaffarali]

Thanks- that was exactly what I was looking for. Working perfectly.

[arinc9]

Hey, I was wondering if you've found another way for this or VPN policy-based routing works just fine?

[lleachii]

2.4GHz through Wireguard, 5GHz direct

Make new network (seems like you've done that and named it wg) Make route for default via mullvad on another table (e.g. Table No. 2): # in /etc/config/network config route option target '0.0.0.0' option netmask '0.0.0.0' option table '2' option interface 'mullvad' Make an routing rule for the WiFi network wg to use interface mullvad: # in /etc/config/network config rule option in 'wg' option dest '0.0.0.0/0' option priority '10' option lookup '2' Done!

[eisengrau]

@lleachii thank you for this tip, working flawlessly. However, how would you go about doing this for two or more other WG tunnels? Add similar entries and change the routing table/lookup for a different number? And/or the priority of the route? I can't seem to get this working for another network.