Exclude IP Range

[Johan1974NL]

Hello,

Just a question out of curiosity. In the VPN Director you can assign certain ip ranges to a VPN connection.
Why i there no possibility to excude certain ip numbers from using VPN at all?

What is the right notation when i want to assign only from 192.168.1.10 and above?



Johan

 

[RMerlin]

Why i there no possibility to excude certain ip numbers from using VPN at all?

There is. Enter the IP, and select "WAN" for interface.

 

[eibgrad]

What is the right notation when i want to assign only from 192.168.1.10 and above?

The only way to express an IP range w/ the VPN Director short of enumerating every IP is to use CIDR notation. Let's say you want to reference 192.168.1.10 through 192.168.1.254. Using an IP Range to CIDR calculator, that can be expressed as ...

192.168.1.10/31
192.168.1.12/30
192.168.1.16/28
192.168.1.32/27
192.168.1.64/26
192.168.1.128/26
192.168.1.192/27
192.168.1.224/28
192.168.1.240/29
192.168.1.248/30
192.168.1.252/31
192.168.1.254/32

Now create a rule for each one.

Of course, that's still rather arduous. So some ppl will purposely find a single CIDR block that happens to covers a large range of IPs, then force those IPs to be used for a specific purpose (e.g., routed over WAN vs. VPN). A good example is 192.168.1.64/27, which covers the IP range of 192.168.1.64 through 192.168.1.95 (32 hosts). Or perhaps 192.168.1.128/26, which covers the IP range of 192.168.1.128 through 192.168.1.191 (64 hosts).