Appreciate some help on this scenario - I have been digging for hours. I can code OK but am terrible at networking...
My setup is...
- I have RT-AC87U running Merlin which sits behind another router functioning as the internet gateway
- All required ports are forwarded etc
- I am running my own VPN Server on AWS
- I connect to this successfully from my RT-AC87U running Merlin using the OpenVPN client
- I have a few rules setup for routing traffic from specific client MAC's through the tunnel
- I use Alexa/Smartthings to fire a AWS Lambda function that turns ON the VPN server and then turns ON the OpenVPN Client via SSH
- My AWS Lambda functions have a static ipaddress assigned
This all works fine.
Problem is once I turn the OpenVPN Client ON, I can no longer SSH into the router from my LAMBDA functions to turn it OFF. I am pretty sure this is because SSH packets are getting routed over VPN instead of back to the LAMBDA ipaddress. I am a bit confused why since I only have specific rules setup for the VPN for specific client MAC addresses. I would have thought that all other traffic is unaffected. Can you tell I suck at networking?
So I have tried adding various LAN static routes for the LAMBDA ipaddress - but cannot seem to get these working.
Any suggestions please?
Thanks
BigDave
My setup is...
- I have RT-AC87U running Merlin which sits behind another router functioning as the internet gateway
- All required ports are forwarded etc
- I am running my own VPN Server on AWS
- I connect to this successfully from my RT-AC87U running Merlin using the OpenVPN client
- I have a few rules setup for routing traffic from specific client MAC's through the tunnel
- I use Alexa/Smartthings to fire a AWS Lambda function that turns ON the VPN server and then turns ON the OpenVPN Client via SSH
- My AWS Lambda functions have a static ipaddress assigned
This all works fine.
Problem is once I turn the OpenVPN Client ON, I can no longer SSH into the router from my LAMBDA functions to turn it OFF. I am pretty sure this is because SSH packets are getting routed over VPN instead of back to the LAMBDA ipaddress. I am a bit confused why since I only have specific rules setup for the VPN for specific client MAC addresses. I would have thought that all other traffic is unaffected. Can you tell I suck at networking?
So I have tried adding various LAN static routes for the LAMBDA ipaddress - but cannot seem to get these working.
Any suggestions please?
Thanks
BigDave
