diff --git a/config/sit/firewall.yaml b/config/sit/firewall.yaml
index 0d7c58b7..697e429c 100644
--- a/config/sit/firewall.yaml
+++ b/config/sit/firewall.yaml
@@ -19,6 +19,8 @@ firewall_rules:
         ports: ["22"]
       - protocol: udp
         ports: ["4789"]
+      - protocol: udp
+        ports: ["51820"]
 
   - name: dev-vpc-2-default-inbound
     enabled: true
@@ -31,3 +33,5 @@ firewall_rules:
         ports: ["22"]
       - protocol: udp
         ports: ["4789"]
+      - protocol: udp
+        ports: ["51820"]
diff --git a/config/sit/vpn-overlay.yaml b/config/sit/vpn-overlay.yaml
index dbcd4912..c78c8fa9 100644
--- a/config/sit/vpn-overlay.yaml
+++ b/config/sit/vpn-overlay.yaml
@@ -28,7 +28,7 @@ hubs:
 sites:
   - name: master-1
     interface: ens5
-    allowed_ips: "172.16.0.0/16,10.253.0.0/16"
+    allowed_ips: "172.16.0.0/16"
     wireguard_peer: hub-1
     br_ip: 10.253.253.2
     wg_ip: 172.16.0.10
@@ -44,7 +44,7 @@ sites:
   - name: slave-1
     interface: ens5
     wireguard_peer: hub-1
-    allowed_ips: "172.16.0.0/16,10.253.0.0/16"
+    allowed_ips: "172.16.0.0/16"
     br_ip: 10.253.253.3
     wg_ip: 172.16.0.11
     local_ip: 172.16.0.11