Archer

So you don’t need a hardware switch

Yep I’ve had it randomly stop working if it has to serve clients outside it’s subnet

You don’t understand what you are doing with your own setup, unfortunately. I would recommend you read up on how VPNs and Wireguard work

These are not tags as specified in the rules

How about not making them dumpster fires like Star Trek: Picard, then

If you haven’t allowed 4 and 6 then it’s not as permissive as possible

Try allowing IPv4 and IPv6, something really basic appears to be broken, so it makes sense to allow more until it’s figured out

I need to see your firewall rules for both 1 and 10, dhcp settings for 10, and the output of ip addr on your test machine.

Interesting, try pinging 8.8.8.8 (no DNS dependency) and looking at your DNS settings, what DNS is set up for the host?

This is a great opportunity to learn tshoot on OPNsense. Learn where the firewall logs are and how to check them to see if your client IP is blocked. Check the firewall rules to see if that VLAN has internet access - remember, the default is deny on firewalls, so the one you made is not the default OPNsense “LAN” firewall with a rule allowing internet access, so look at how that is set up and compare to your VLAN