YazFi YazFi: Guest traffic not routed through VPN

[blobe]

Hi Guys,

Probably this has been talked about a lot, but I've read half the topics and couldn't find a solution.

What I'm trying to do, is to set up VPN ONLY for a guest network (thru protonvpn). The problem is, if I enable the VPN client, all my traffic flows through the vpn tunnel, not just the guest network traffic.

This is the configuration pushed by the VPN server:

PUSH: Received control message: '
PUSH_REPLY,
dhcp-option DNS 10.18.0.1,
redirect-gateway def1,
sndbuf 524288,
rcvbuf 524288,
explicit-exit-notify,comp-lzo no,
route-gateway 10.18.0.1,
topology subnet,
ping 10,
ping-restart 6

Figured out that it's probably because the 'redirect-gateway def1'being pushed, which I can filter with

pull-filter ignore "redirect-gateway"

Which seems to do the work according to the log:

Pushed option removed by filter: 'redirect-gateway def1'

Now my main traffic is not routed through the VPN tunnel. But neither is my guest network traffic, and this is where I'm stuck right now.

This is my YazFi configuration:

wl01_ENABLED=true
wl01_IPADDR=192.168.2.0
wl01_DHCPSTART=2
wl01_DHCPEND=254
wl01_DNS1=192.168.1.1
wl01_DNS2=192.168.1.1
wl01_FORCEDNS=true
wl01_REDIRECTALLTOVPN=true
wl01_VPNCLIENTNUMBER=1
wl01_TWOWAYTOGUEST=false
wl01_ONEWAYTOGUEST=true
wl01_CLIENTISOLATION=false

this is the default client-side configuration provided by protonvpn (except for the pull-filter ignore which I added):

remote-random
resolv-retry infinite
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
remote-cert-tls server
pull
pull-filter ignore "redirect-gateway"
fast-io

I can only assume that the openVPN configuration has issues.

I'm using merlin 384.18 and YazFi v4.1.4 on an RT-N18U.

Any help is appriciated, I've spent a few afternoon trying to fix this.

 

[Jack Yaz]

Have you actually set "Redirect Internet traffic" in the VPN client to policy rules?

 

[blobe]

Have you actually set "Redirect Internet traffic" in the VPN client to policy rules?

Yeah, but if I add the

192.168.2.0/24

as source IP, then there is no internet on the guest network at all.

 

[Er0n]

Very similar issue here, in case you jump on this post while trying to figure out how to fix it: https://www.snbforums.com/threads/issue-with-yazfi-and-vpn.75642/