VPN + Diversion

[BaconScout]

Hello, I recently set up VPN (nord) on my router. VPN works fine, Diversion works fine but not together.

When running via VPN adds are not blocked. Flipping device off of VPN adds are blocked

Help is appreciated.
my setup:
RT-AC88U 386.12_6 (current)
Diversion 5.1.1 (current)

VPN is set up with NordVPN in exclusive mode as I only want specific devices to utilize the VPN (two currently).

I am running DNS Director but I'm not entirely sure if its relevant to this and if so what values to put in.

Any help is appreciated.

 

[Ripshod]

Traffic running over a VPN tunnel traffic bypasses all the controls on the router. What you are experiencing is known, and expected.

 

[BaconScout]

Can you elaborate?
Traffic isn't in the VPN tunnel until the router where the VPN is configured.
Based on your explanation anything that's happening in the router is going to be bypassed; QOS, firewall etc.

shouldn't it work like DEVICE (non vpn wifi) > router (services firewall etc) then VPN > cloud ?

 

[Joe Mifflin]

I had same issues when i upgraded from ac86u to ax88 pro....using wireguard with torguard vpn....spent weeks knowing I had something messed up....then I finally noticed I had the dns in wireguard settings to google....changed it to 192.168.50.1...diversion now works perfect through vpn

 

[ColinTaylor]

shouldn't it work like DEVICE (non vpn wifi) > router (services firewall etc) then VPN > cloud ?

No that's not how it works.

VPN is set up with NordVPN in exclusive mode as I only want specific devices to utilize the VPN (two currently).

Exclusive mode is a DNS setting not a device setting. By setting "Accept DNS configuration" to "Exclusive" you have told the router to ignore all other DNS servers (e.g. Diversion) and only use NordVPN's DNS servers for client queries. Specific device routing is done by VPN Director (policy rules).

 

[BaconScout]

No that's not how it works.


Exclusive mode is a DNS setting not a device setting. By setting "Accept DNS configuration" to "Exclusive" you have told the router to ignore all other DNS servers (e.g. Diversion) and only use NordVPN's DNS servers for client queries. Specific device routing is done by VPN Director (policy rules).

View attachment 57544

Colin, thank you.. this set me on the right path. I appreciate you taking the time to provide me with a helpful explanation!