Wireguard - (yet) another newbie struggling

[user27]

  Hi

I'm a total n00b with OpnSense. but have got a functioning system with a single LAN on 192.168.1.x subnet

I have configured WG instance and can connect (ie: I see a handshake) my iPhone peer to the peer on OpnSense

But phone cannot access any LAN resources or access internet if WG tunnel is active

Feels like a routing issue between peer on OpnSense and LAN

WG peers are 50.x subnet and I do get the appropriate IP on phone when connected

FW rule is set to pass all incoming IPv4 traffic on Wireguard tunnel net interface

Have looked at numerous HowTos and the like and have followed them closely, but this last hurdle has me stumped

Can anyone advise? Any configs you need to see? (happy to supply)

Many thanks

[user27]

OK so semi fixed, in that I can connect to LAN resources from iPhone peer over 4G using WireGuard

But that same peer does not then have access to internet (ie: back out again from behind OpnSense FW)

iPhone peer on 192.168.50.x, LAN is 1.x, DNS is 1.1

Presumably I'm missing a FW rule?

[user27]

Yep, was missing a route