VPN Client policy rules

[Hollywood]

I have a RT-AX58U and a RT-AX88U and these both have this issue.
I have installed the current Merlin firmware and I setup under VPN>VPN Client>OpenVPN my VPN service PrivateVPN with an LA, Calif server under Client 1. I did the same for Client 2 but with a Vancouver Canada server. I can set Service State to ON for one and the other OFF and vice versa and it switches servers like I expect.

My issue is that if I set "Block routed clients if tunnel goes down", the internet is blocked because of that setting even though that "Client 1" is off. So basically if I want to switch VPN servers I need to turn off that client AND disable that setting too (even if that Client is set to OFF).

Am I not using this properly or is it a bug that a setting on an client set to OFF is stopping access. I'm probably not understanding this as I don't see where you would have more then one Client set to ON at a time. Any help would be appreciated.

Thanks!

 

[Martineau]

I have a RT-AX58U and a RT-AX88U and these both have this issue.
I have installed the current Merlin firmware and I setup under VPN>VPN Client>OpenVPN my VPN service PrivateVPN with an LA, Calif server under Client 1. I did the same for Client 2 but with a Vancouver Canada server. I can set Service State to ON for one and the other OFF and vice versa and it switches servers like I expect.

My issue is that if I set "Block routed clients if tunnel goes down", the internet is blocked because of that setting even though that "Client 1" is off. So basically if I want to switch VPN servers I need to turn off that client AND disable that setting too (even if that Client is set to OFF).

Am I not using this properly or is it a bug that a setting on an client set to OFF is stopping access. I'm probably not understanding this as I don't see where you would have more then one Client set to ON at a time. Any help would be appreciated.

Thanks!

see KILL-switch Confused as to how to make the kill switch work if you have the same Selective Routing devices defined in both VPN Clients.

 

[Yota]

My issue is that if I set "Block routed clients if tunnel goes down", the internet is blocked because of that setting even though that "Client 1" is off. So basically if I want to switch VPN servers I need to turn off that client AND disable that setting too (even if that Client is set to OFF).

I remember RMerlin once said that this is how it works, because the router does not know if it was manually turned off or accidentally disconnected.

Edit: found it!

2) This is by design. OpenVPN itself cannot really distinguish between a manual and an unintentional disconnect, which is why I decided to go for the safer option, which is to always assume that if the tunnel goes down, then traffic should still be blocked.

 

[Hollywood]

Thank you both for you replies. They were both helpful.