Open VPN Client -Redirect Internet Policy

[surajvuk]

Hey Guys,

I have an Asus Router and loaded the Merlin Firmware.
Model: RT-AC87
Merlin firmware 380.65

I have a specific query around the Open VPN client using the redirect internet Policy options. and like to know if its a bug or by design.

Recently, I subscribed to Netflix and they have stopped allowing VPNs.

Before I subscribed to Netflix I didn't need to use the option of 'Policy Rules'. As any devices connected to the router was using the VPN tunnel.

Now I have selected the option of 'Policy rules' and added my Samsung TV IP address to the rules and selected the option WAN on the interface (Iface) and Applied.

Since I have done that rest of the devices connected have also bypassed the VPN tunnel.

So my question is that correct and by design? Or Is this a bug?

To get the rest of the devices back routing through the VPN tunnel I had been add all my devices to the Rule list and select interface as VPN.

If you require any more information please let me know?

 

[cybrnook]

Yes thats by design.

When you choose Policy rules, it ONLY routes the ip's you list over VPN.
https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-routing

 

[Martineau]

To get the rest of the devices back routing through the VPN tunnel I had been add all my devices to the Rule list and select interface as VPN.

Actually you only need two rules, but it isn't intuitive on the GUI, nor is it described in the Merlin Wiki, but it is described in @yorgi's comprehensive tutorial:

https://www.snbforums.com/threads/h...ia-and-other-vpn-providers-10-15-fixed.30851/

Basically to force everything via the VPN except one device

Everything   192.168.1.0/24   0.0.0.0   vpn
Except       192.168.1.xxx    0.0.0.0   wan

 

[surajvuk]

Thanks for the information. I will managed the VPN list rather than applying two rules. The reason for that is when I join a new device the IP address are quiet random so I would have to do some admin task of assigning manual IP addresses.

I have another query which is not related to this topic. who do I request a nice to have features on the custom firmware. What I am looking for is to remove the USB disk safely at specific time every night.