OVPN client, can't change policy rules

[rhodies]

I have an RT-AX3000 router using Merlin firmware for the AX58U.
I use OVPN files to set up various VPN clients. One client uses the VPN Director (policy rules) to limit the VPN to one PC with the killswitch option enabled.
I upgraded from 386_2_2 to 386_4 and also 386_5_2 and now can no longer add or delete policy rules - there is no plus/minus button to do this. If I downgrade back to 386_2_2, I am able to add and delete policy rules. See attached screenshots:
Also, the killswitch no longer seems to work - if I turn off the VPN, the PC simply connects to my normal ISP - it shouldn't connect to anything but the VPN.
is this a bug ?

s

 

[ColinTaylor]

You need to go to the VPN Director tab (that's why it says "VPN Director rules related to this client").

 

[eibgrad]

If you manually turn OFF the VPN, the kill switch, by design, will NO LONGER provide protection. In order to work, the OpenVPN client has to be configured to autostart, and left running once established.

That was a change instituted a few versions back. If you want something more like the old way, consider the following.

Kill switch doesn't work

It seems to me kill switch stopped working for me. I had 386.1.x FW and noticed after router reboot that my OpenVPN client is down and despite I had setting to prevent client access to Internet when VPN is down, client still had access to Internet. I could not make kill switch work so updated to...

www.snbforums.com

 

[rhodies]

You need to go to the VPN Director tab (that's why it says "VPN Director rules related to this client").

Where is the VPN Director tab ?
These settings were under Advanced Settings previously, but now the VPN Director choice is under Network Settings.

 

[ColinTaylor]

Where is the VPN Director tab ?

VPN Director

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

 

[rhodies]

If you manually turn OFF the VPN, the kill switch, by design, will NO LONGER provide protection. In order to work, the OpenVPN client has to be configured to autostart, and left running once established.

That was a change instituted a few versions back. If you want something more like the old way, consider the following.

Kill switch doesn't work

It seems to me kill switch stopped working for me. I had 386.1.x FW and noticed after router reboot that my OpenVPN client is down and despite I had setting to prevent client access to Internet when VPN is down, client still had access to Internet. I could not make kill switch work so updated to...

www.snbforums.com

Thanks, I'll look into this

 

[rhodies]

View attachment 40973

VPN Director

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

Thanks - I re-upgraded back to 386_4 and found the new tab ;-)