diff --git a/man/systemd.netdev.xml b/man/systemd.netdev.xml index fffef93aa2..7a5d5cc48d 100644 --- a/man/systemd.netdev.xml +++ b/man/systemd.netdev.xml @@ -1629,9 +1629,16 @@ Sets a comma-separated list of IP (v4 or v6) addresses with CIDR masks from which this peer is allowed to send incoming traffic and to - which outgoing traffic for this peer is directed. The catch-all - 0.0.0.0/0 may be specified for matching all IPv4 addresses, and - ::/0 may be specified for matching all IPv6 addresses. + which outgoing traffic for this peer is directed. + The catch-all 0.0.0.0/0 may be specified for matching all IPv4 addresses, + and ::/0 may be specified for matching all IPv6 addresses. + Note that this only affects "routing inside the network interface itself", + as in, which wireguard peer packets with a specific destination address are sent to, + and what source addresses are accepted from which peer. + To cause packets to be sent via wireguard in first place, a route needs + to be added, as well - either in the [Routes] section on the + .network matching the wireguard interface, or outside of networkd. +