Selective routing

[Jevewun]

So I have 2 VPN profile set up. One for UK Browsing and one for Streaming because my UK profile will not allow Netflix streaming.

Currently I have the UK set up as 192.168.1.0/24 for every device to go through VPN on Client 1 and below it I have the Powerline Adapter, Printer and PlayStation as Static and iface as WAN.

Now I want to configure my Chromecast to go not through UK VPN, not through WAN but rather the Streaming Profile set up on Client 2. The firmware does allows me to have both clients switched on simultaneously.

However I do not want to manually add all devices as VPN and all those for WAN because that would mean any guest who connect to the network would be exposed and not going through VPN unless I again manually add them each time which would be tiring and hard work.

Anyone have any suggestions I can try would be much appreciated. Thanks.

 

[Xentrk]

So I have 2 VPN profile set up. One for UK Browsing and one for Streaming because my UK profile will not allow Netflix streaming.

Currently I have the UK set up as 192.168.1.0/24 for every device to go through VPN on Client 1 and below it I have the Powerline Adapter, Printer and PlayStation as Static and iface as WAN.

Now I want to configure my Chromecast to go not through UK VPN, not through WAN but rather the Streaming Profile set up on Client 2. The firmware does allows me to have both clients switched on simultaneously.

However I do not want to manually add all devices as VPN and all those for WAN because that would mean any guest who connect to the network would be exposed and not going through VPN unless I again manually add them each time which would be tiring and hard work.

Anyone have any suggestions I can try would be much appreciated. Thanks.

There is a tutorial in the VPN forum on how to configure selective routing in the GUI.

I can’t recall if the Asuswrt firmware allows it as I am on the road right now. But on my pfSense appliance, I have defined 10 IP addresses available that can be assigned dynamically for guests that are not the same range as the static IP reservations. Then in the GUI, create an entry for the dynamic IP address range to have those addresses routed to the WAN. The 192.168.1.0/24 entry makes every LAN client get routed to the VPN. You should also be able to specify the range of IP addresses for the static IP assignments.

I have a script that I plan to make available in a few weeks that will simplify the interface assignments for static IP address to avoid having to type them in the OpenVPN Client GUI.

 

[Jack Yaz]

Or set up a dedicated guest network ssid for VPN usage https://www.snbforums.com/threads/yazfi-enhanced-asuswrt-merlin-guest-wifi-inc-ssid-vpn-client.45924