BQ16: WireGuard site-to-site VPN: Can't reach remote router UI

[nsayer]

I've got a pair of BQ16s in two locations and I've made a WireGuard site-to-site VPN to connect them. The VPN works just fine and I can reach all of the devices in each location from both locations.

EXCEPT... from site A I can't reach the router at site B and vice-versa.

I can work around this by using ssh socket forwarding to reach the router from a machine on the opposite LAN, but this seems like it's a deliberate choice to exclude access to the UI from "outside." And I don't want to allow access to the UI from the WAN... Is there a way I can permit access to the other sites?

[jzchen]

Are both routers 192.168.50.1?

[nsayer]

Neither of them are. One is 10.1, the other 15.1. 

[nsayer]

Remember: everything on both subnets is accessible from either side… except for being unable to reach the opposite subnet’s router. 

[nsayer]

Correction: I tried again just now and it does work in one direction but not the other. From the subnet of the router acting as the WireGuard client, I can bring up the web UI of the router acting as the WireGuard server, but from the server subnet I cannot reach the client router (but can reach everything else on the client subnet).