Selective routing for vlan through VPN - No Internet (Wireguard) - FIXED

[yahyoh]

Hey Guys,

I have been trying to wrap my head around this issue, where im trying route only vlan20 through VPN.
Below steps i took:

1-created vlan20 network -> turned on DHCP
2- setup WG client  (Windscribe) as per the config file. -> connected with handshake



3-created wiregard interface

4-created WG gateway


5-Created nat outbound rule for the WG.



6-Created vlan20 rule to use WG gateway and created port forward nat rule to forward all dns quires to opnsense.




unbound already been restarted several times BTW and  its listening to all interfaces..

Same setup working fine on pfsense but not opnsene for some reason? i have been trying to get it to work without any success  :'(

any help would be appreciated.

[yahyoh]

FIXED The damn issue, after 6 hours of testing.

1- first i turend off  KEA DHCP and went back to ISC DHCP (not sure if it was related)

2- had to change the rule of nat dns port forwarding and turn off ( Destination / Invert).



Then everything worked nicely.  8)