diff --git a/config/sit/vpn-overlay.yaml b/config/sit/vpn-overlay.yaml
index 01f4dc19..dbcd4912 100644
--- a/config/sit/vpn-overlay.yaml
+++ b/config/sit/vpn-overlay.yaml
@@ -15,8 +15,8 @@ features:
 # WireGuard Hub 节点配置
 hubs:
   - name: hub-1
-    wg_ip: 10.255.0.1
-    br_ip: 172.16.0.1
+    wg_ip: 172.16.0.1
+    br_ip: 10.253.253.1
     public_ip: global-proxy.onwalk.net
 
   - name: hub2
@@ -28,12 +28,12 @@ hubs:
 sites:
   - name: master-1
     interface: ens5
-    allowed_ips: "10.255.0.0/16,10.253.0.0/16"
+    allowed_ips: "172.16.0.0/16,10.253.0.0/16"
     wireguard_peer: hub-1
-    wg_ip: 10.255.0.200
-    br_ip: 172.16.0.2
-    local_ip: 10.255.0.200
-    remote_ip: 10.255.0.100
+    br_ip: 10.253.253.2
+    wg_ip: 172.16.0.10
+    local_ip: 172.16.0.10
+    remote_ip: 172.16.0.11
     vless:
       enabled: false
       uuid: "11111111-1111-1111-1111-111111111111"
@@ -44,11 +44,11 @@ sites:
   - name: slave-1
     interface: ens5
     wireguard_peer: hub-1
-    allowed_ips: "10.255.0.0/16,10.253.0.0/16"
-    br_ip: 172.16.0.2
-    wg_ip: 10.255.0.100
-    local_ip: 10.255.0.100
-    remote_ip: 10.255.0.200
+    allowed_ips: "172.16.0.0/16,10.253.0.0/16"
+    br_ip: 10.253.253.3
+    wg_ip: 172.16.0.11
+    local_ip: 172.16.0.11
+    remote_ip: 172.16.0.10
     vless:
       enabled: false  # 此节点不通过 VLESS，直接访问 Hub