diff --git a/source/manual/how-tos/wireguard-selective-routing.rst b/source/manual/how-tos/wireguard-selective-routing.rst index 6e93793e..6082e34b 100644 --- a/source/manual/how-tos/wireguard-selective-routing.rst +++ b/source/manual/how-tos/wireguard-selective-routing.rst @@ -196,11 +196,13 @@ The step has two parts - first creating a second Alias for all local (private) n - **Save** the rule, and then click **Apply Changes** - Then make sure that the new rule is **above** any other rule on the interface that would otherwise interfere with its operation. For example, you want your new rule to be above the “Default allow LAN to any rule” --------------------------- -Step 9 - Configure routing --------------------------- +-------------------------------------------------------------- +Step 9 - Configure routing for traffic generated by the router +-------------------------------------------------------------- -- Then go to :menuselection:`Firewall --> Rules --> Floating` +Services running on the router and configured to use the VPN interface must have their traffic routed to the VPN gateway in order to use the VPN. Note that locally generated traffic is not affected by NAT or by the firewall rule created in Step 8. + +- Go to :menuselection:`Firewall --> Rules --> Floating` - Click **Add** to add a new rule - Configure the rule as follows (if an option is not mentioned below, leave it as the default). You need to click the **Show/Hide** button next to "Advanced Options" to reveal the last setting: