Differentiate between providers not being reachable and not allowed to connect on none wifi

Feature description:

I was on mobile and trying to debug why my wireguard config was not working. It turns out in the end, i had ticket only connect on wifi but the UI gave me very little feedback about being set and I thought the VPN was not working.

Problem solved:

Users debugging at the wrong layer of their stack.

Brought benefits:

Would have saved me some time.

Other application solutions:

 

 

Additional description and context:

 

 

Screenshots / Mockup: