Verifying outbound, non-DHCP traffic goes through VPN

[Denna]

1) When OpenVPN is setup on Asuswrt-Rmerlin, how do you verify all outbound, non-DHCP traffic is going through the VPN ?

2) How does a killswitch enforce this ?

 

[joegreat]

1) When OpenVPN is setup on Asuswrt-Rmerlin, how do you verify all outbound, non-DHCP traffic is going through the VPN ?

Not sure what you are referring to with "non-DHCP traffic", but the setting "Redirect Internet Traffic" can be configured with different option to fulfill the traffic routing needs.
You can check the routing by going to a internet site which shows your IP - e.g. google.com query...

2) How does a killswitch enforce this ?

I assume the VPN setup option "Block routed clients if tunnel goes down" (see VPN / OpenVPN Clients) is the kill-switch you are looking for...

 

[Paul_1984]

1) When OpenVPN is setup on Asuswrt-Rmerlin, how do you verify all outbound, non-DHCP traffic is going through the VPN ?

2) How does a killswitch enforce this ?

Can you turn on policy restrictions and set the source IP to 0.0.0.0/0 and the destination to 0.0.0.0 and the type to VPN? That should default your entire network to go through the VPN. If you need to create a few exceptions, then you can add those ranges with a type=WAN.

 

[Denna]

@joegreat and @Paul_1984,

Thanks for the help.​