What's new

VPN whitelist with RT-AC3200?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

IT@K

New Around Here
Is it possible to have a VPN whitelist based either on IP or MAC, or do I need to upgrade to something else?
 
What do you mean by "whitelist"? VPN server? VPN client? OpenVPN? PPTP? Source address? Destination address?
 
I’m guessing “selective routing”, and those that are not being routed through the VPN tunnel are on the “whitelist”.
 
Sorry, that was unclear.

I’m looking for a way to allow only certain IP addresses in through the VPN (this being above and beyond dedicated vpn accounts).
 
There's not an easy way of doing it unfortunately. OpenVPN has no built-in method of blocking client IP addresses AFAIK. The most obvious place to do it would be on the firewall. But because of the way the router dynamically creates the firewall rules it's difficult to implement reliably.

There was a similar discussion here, but that was for a blacklist rather than a whitelist. I think the take-away from that thread was that instead of relying on IP addresses it would be much more preferable to use a password+certificate combination.
 
  • Like
Reactions: kfp
There's not an easy way of doing it unfortunately. OpenVPN has no built-in method of blocking client IP addresses AFAIK. The most obvious place to do it would be on the firewall. But because of the way the router dynamically creates the firewall rules it's difficult to implement reliably.

There was a similar discussion here, but that was for a blacklist rather than a whitelist. I think the take-away from that thread was that instead of relying on IP addresses it would be much more preferable to use a password+certificate combination.

Thanks for the link. I just wanted to make sure I wasn't missing something obvious.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top