title: What are the correct "allowed IPs" on this site-to-site Wireguard link -- it should be obvious, but obviously not to me :_)
body: <p>I've <em>almost</em> got it working, but not quite, and I've tried nearly everything except dark forces of magic.  I have thought of another idea, but I didn't think crying would help.</p>
  <p>It's a site-to-site link (happens to be two Mikrotik CHR routers).  Looks somehting like this:</p>
  <pre><code>- 199.181.204.128/26-R2-Public InternetIP-R1--199.181.204.0/26---R1--Internet
  </code></pre>
  <p>The Wireguard link between R2 and R1 is up and I have a private IP space (192.168.89.0/30) between them.  Both sites can ping.  (192.168.89.1&lt;-&gt;192.168.89.2).  <em>However</em>, R2 can't seem to pass traffic the Private IP space to 199.181.204.128.  No firewalls are active for testing.</p>
  <p>It seems to be related to <em>AllowedIPs</em> but I have no idea how or why.
  What I <em>think</em> I'm supposed to do is:</p>
  <p>R2 <em>AllowedIPs = 199.181.204.128/26</em> -- Meaning pass all of this traffic
  R1 <em>AllowedIPs = 0.0.0.0/0</em> -- Pass everything if it gets there</p>
  <p>What I really want is to say, just pass it, don't think about it like OpenVPN would do.  Don't filter, just pass packets from one interface to another.</p>
  <p>Can I turn this feature off and make Wireguard &quot;dumb&quot; or what do I put in this?</p>