remember that your LAN needs to know how to get back to that 10.0.100.0/24 network that you’re using for the WireGuard segment. If you have a main router somewhere other than your vyos wireguard VPN concentrator, you’ll need to put a route in there to forward 10.0.100.0/24 traffic to your vyos router.