Kill switch in router Asus RT-N66U

[mies]

Hello,

Today I have a VPN client (AirVPN) up and running on my router RT-N66U.
What I want is that when the VPN connection drops my internet connection also drops and not remains on the ISP connection.
It would be nice to this for all the connected devices or for just a few specific ones.
Can I do this with the Merlin firmware and with what version?
How can I do this? I do not have installed this firmware yet.

I saw this item and I think it would be possible with this. Am I correct?
http://asuswrt.lostrealm.ca/sites/default/files/pictures/ovpn-routing.png

I do not want to make difficult firewall rules in an open source firmware software like DD WRT or Tomato, because I do npt understand these rules....

Is the Merlin software for my router supporting the 4096 bits key, because I need this for the AirVPN provider.
I hope you can help me wit this.

gr Mies

 

[RMerlin]

I saw this item and I think it would be possible with this. Am I correct?
http://asuswrt.lostrealm.ca/sites/default/files/pictures/ovpn-routing.png

That's correct. 378.55 (latest version available for the N66U) has what you need.

Is the Merlin software for my router supporting the 4096 bits key, because I need this for the AirVPN provider.

The key/cert input fields should be large enough to support a 4096-bit key from what I remember.

 

[mies]

That's correct. 378.55 (latest version available for the N66U) has what you need.



The key/cert input fields should be large enough to support a 4096-bit key from what I remember.

First I want to thank you for answering my question!

Is that option reliable?
So the internet traffic is really blocked when the VPN is dropped?
I do not want to make specific routing rules and so on. The only thing I want to achieve is that all devices are blocked on going on the internet outside the VPN. Do I only have to check the box and not to make any rules?


I do not know how to test this by myself (sorry.....)

gr. Mies

 

[RMerlin]

First I want to thank you for answering my question!

Is that option reliable?
So the internet traffic is really blocked when the VPN is dropped?
I do not want to make specific routing rules and so on. The only thing I want to achieve is that all devices are blocked on going on the internet outside the VPN. Do I only have to check the box and not to make any rules?


I do not know how to test this by myself (sorry.....)

gr. Mies

It should be. At least it was for me when I tested it.

Note that this option is only to take care of situations where the tunnel goes down. To force clients through the tunnel, you still need two rules:

One for the whole subnet, through VPN
One for the router's IP, through WAN


Simplest way to test it is simply to try to access the Internet after turning off your tunnel.

For test purposes, you can look at a free service such as VPNBook - I use their service for testing OpenVPN client-related features.