Hey all. Am I misunderstanding wg(4):
The interface will route outbound tunneled traffic to the peer
configured with the most specific matching allowed IP address
range, or drop it if no such match exists.
Traffic between my laptop and vpn remote works, but I don't see any route
changes at all when I specify remote ranges in wgaip. I can only get traffic
correctly flowing if I manually add an identical list of !route add in
hostname.wg*
wgpeer $peer \
wgendpoint 10.10.63.136 51820 \
wgaip 192.168.101.0/24 \
wgaip 192.168.62.181/32 \
wgaip 192.168.62.182/32 \
wgaip 192.168.62.183/32 \
wgaip 192.168.62.184/32 \
wgdescr "vpn01" wgpka 25
inet 192.168.101.20/24
!route add -host 192.168.62.181 192.168.101.1
!route add -host 192.168.62.182 192.168.101.1
!route add -host 192.168.62.183 192.168.101.1
!route add -host 192.168.62.184 192.168.101.1
Am I doing something wrong? I am surprised that wgaip doesn't automatically
change the routing table when I bring wireguard interfaces up and down.
I appreciate any hints.
--
Alex Holst
