Exclude and Include lists (gateway=off) issues

What is the name of the domain?

ceyephersecurity.com

What is the error number?

gateway=off

What is the issue you’re encountering

How do you use exclude and include lists in this sense?

What steps have you taken to resolve the issue?

I have attempted to add the LAN and the WAN to both include and exclude to connect the WARP tunnel via certain IP Addresses. What I need to know is how do I go about locking websites behind connection to the WARP? How do the exclude and include lists work? I gather that exclude means that any IP addresses in the exclude list will be directed straight to the server, bypassing the zero trust?

Include: Any IP addresses in the include list will be forced to authenticate?

An explanation would be awesome! Thank you cloudflare community!

have added the WARP client check (Gateway) as well as made sure the access list is correct.

I seem to have them backwards. Include bypasses authentication and exclude will force authentication.