the alternative could be using the ip route add table command, to add a 2nd routing table with the default route pointing to your 2nd device.
and then with the ip rule add command, force traffic from certain IP-addresses to use that 2nd routing table.
out of curiosity, is the issue with the OpenVPN client (your router connects to some VPN provider) or with the OpenVPN server? (for instance you phone connects to your router).
In case of the latter, did you install a new .opvn profile on your phone as well after upgrade?
(.32 moves from...
guess I could have seen that by looking at your log-files.
the difference seems to be in "AdGuard Home: Install OK. WAN is UP" vs "AdGuard Home: Install FAILED. WAN is UP"
I think because you are not using USB, it really needs to download the install file again after each reboot.
I can only...
Are you perhaps using Entware on your USB stick?
I had to lower the sleep in autorun/scripts/post-mount.sh
I had some kind of race condition between Entware script remounting a lot of folders from the usb-stick, vs the AGH starting up.
Lowering the sleep from 30 to 20 solved by issue.
The generation of the openvpn certificate happens solely on the router.
when openvpn server is started for the first time (or perhaps started for the first time after factory defaults), it sees that there is not yet a certificate stored in the flash memory -> it then generates certificate and...
On R7800 this certificate is generated on the router and stored somewhere in a flash partition.
I assume R9000 will do the same.
(you could check the contents of /etc/init.d/openvpn. This is the startup script for OpenVPN server on R7800. It has some functions for extracting and regenerating...
I also use IPvanish.
The configs I downloaded (from https://configs.ipvanish.com/configs/) do not even contain that Certificate part -> I needed to download "ca.ipvanish.com.crt" from their website aswell and put it on the router in the folder /etc/openvpn/config/client/
(in addition to removing...
I guess I overlooked the fact that you mentioned everything works when traveling.
So basically the VPN client is still set to active, but for some reason cannot connect? And thus the phone/openvpn client is blocking direct access to internet?
in that case, the OpenVPN client is doing what it...
So you want to block access from WiFi to the OpenVPN server on your router, so that your OpenVPN client cannot connect and thus will fall back to using WiFi directly??
Don't think it is very secure if the OpenVPN client would behave in that way.
Why not configure this option "Clients will use...
I don't have experience with Netgear in AccessPoint mode, but I'd be very surprised if router1 would push any WiFi info to router2.
Router 1 wouldn't even know there is an access point connected (it could just as well be a switch). So I think it is fine to use a different SSID.
and for the...
The way it now seems to be configured is causing your traffic from the Office network to be NATted twice when going to the internet.
Don't think it would be causing the zoom / wifi disconnects though.
But, do you really require the both locations to be also in different subnets?
(perhaps from...
Which channel is your 5GHz Wifi on?
I vaguely recall a similar thing with my R7800 a few years ago, when I was using one of the DFS channels.
Since I've switched back to one of the standard 5GHz channels, I never had this issue again.
Isn't just using the port-forwarding settings in the GUI adding similar iptables rules?
What would be the benefit of using plain iptables instead of the GUI settings?
And I think it won't work without some form of VPN bypassing...
Traffic to the server in LAN will arrive via brwan from the ISP...