ASUS RT-AC3200 OpenVPN and forcing clients to use Internet

[Sub New]

Hi everyone,

I read through this forum in a lot of detail, and I saw other articles around this, but nothing that solves what i'm looking for. Here is my setup, and I would truly appreciate if you can help me out:

Router: ASUS RT-AC3200
Firmware: 3.0.0.4.378_9529
VPN: OpenVPN

Interface Type: TAP
Protocol: TCP
Server Port: 1194
Firewall: Auto
Authorization Mode: TLS
Username / Password Auth. Only: Yes (I've tried both, no difference)
Extra HMAC authorization: Disable
Allocation from DHCP: Yes
Poll interval: 0
Direct Clients to redirect internet traffic: No (This is what I'm trying to have it be YES, but everything stops)
Respond to DNS: Yes
Advertise DNS to clients: Yes
Encryption Cipher: BF-CBC (I've tried different, no change)
Compression: Adaptive
TLS Renegotiation Time: -1
Manage Client-Specific Options: No
Customer Configuration: (This field is blank. Is this where the magic happens)?


Machine: Mac Book Pro, running latest OS X
Client: Tunnelblick OPENVPN

So I download the config file from the router.
I upload it to the OpenVpn client on MAC
I connect it and it works fine.

Now, I'm trying to get all my internet traffic to go over the VPN.
I make the change within TunnelBlick, under Settings / While Connected. No Difference there !!!!

I make the change on the Router for Direct Clients to redirect internet traffic: BOOM !!!!
The tunnel connects but now I can't talk to the outside world. No DNS etc etc.

I am sorry, if this is a very newbie question.
But would love some help, insight and if you have better way to configure the router.

My primary goal is to have a way, where I can VPN, and either switch internet traffic to go over the VPN, ON or OFF as needed, or HARD CODE it.

 

[Sub New]

Ok, so I figured this out

I changed Allocate from DHCP to: "NO"
Then I added a range myself from the same subnet as the router.
Voila it started working !!!

 

[nalare33]

Ok, so I figured this out

I changed Allocate from DHCP to: "NO"
Then I added a range myself from the same subnet as the router.
Voila it started working !!!

I just wanted to thank you for taking the time to post the solution, it worked for me.

Thanks, I really appreciate it.