for anyone struggling to get the xor to pass in the precheck, I added obstructions to prevent the router from using this space: