I figured out that LAN access won’t work for /24 subnet.
I was trying to segment my ZT subnet under 192.168.196.0/24 and I couldn’t access my LAN behind my RPi.
So I changed back to 172.26.0.0/16 and it worked again.
@jw_dyan could you try to use a /16 subnet?