Routing issues with multiple vpn client and multiple devices

[pikachu123]

Hello, I have ASUS RT-AC86U router and asus merlin version 384.19.

I have two Open VPN client profiles running in the router and I have following device routing requirements -

1. Device1 to route via VPN1
2. Device 2 to bypass any VPN
3. Device 3 to bypass any VPN
4. All other devices to route via VPN2

With these requirements, I have configured policy rules (strict) on my VPN profiles like below -

For VPN 1 -
Rule 1 - Device1 IP goes via VPN iface

For VPN2 -
Rule 1 - Device2 IP goes via WAN iface
Rule 2 - Device3 IP goes via WAN iface
Rule 3 - 192.168.1.0/24 goes via VPN iface

I have ensured these devices have manually configured IPs in the DHCP setting.

I am facing issue that sometimes Device2 is being routed via VPN. Can someone confirm if my rules configuration is correct? Is there any better way to fulfil the routing requirements?

 

[eibgrad]

I am facing issue that sometimes Device2 is being routed via VPN.

Which VPN? Always the same one? Differs? Any discernable pattern?

 

[GSpock]

just in case, check this one:

Policy based routing on Asus RT-AC86U not working as expected

Hi Guys, after reading here all the cool things you can do with merlin I decided to bite the bullet and got myself an Asus AC86U. I received it a couple of days ago and I'm trying to setup multiple VPNs and have different devices connecting to different VPNs. I managed to set up the VPNs but...

www.snbforums.com

especially Jack Yaz 's answer

 

[Martineau]

Hello, I have ASUS RT-AC86U router and asus merlin version 384.19.

I have two Open VPN client profiles running in the router and I have following device routing requirements -

1. Device1 to route via VPN1
2. Device 2 to bypass any VPN
3. Device 3 to bypass any VPN
4. All other devices to route via VPN2

With these requirements, I have configured policy rules (strict) on my VPN profiles like below -

For VPN 1 -
Rule 1 - Device1 IP goes via VPN iface

For VPN2 -
Rule 1 - Device2 IP goes via WAN iface
Rule 2 - Device3 IP goes via WAN iface
Rule 3 - 192.168.1.0/24 goes via VPN iface

I have ensured these devices have manually configured IPs in the DHCP setting.

I am facing issue that sometimes Device2 is being routed via VPN. Can someone confirm if my rules configuration is correct? Is there any better way to fulfil the routing requirements?

You can use this one-line command to verify the actual Selective Routing rules when 'Device2' is incorrectly routed via the VPN

echo RPDB "Rules";ip rule;for I in 1 2 3 4 5;do echo VPN Client ovpn$I;ip route show table 11$I;echo;done;echo "WAN";ip route | grep -E "^0\.|^128.|^default" | sed '/^default/ s/[^ ]*[^ ]/xxx.xxx.xxx.xxx/3'