gbmartho wrote

Current setup

2 wans - 1 1gb fibre (WAN1), 1 standard broad band (WAN2)

Setup policy routing so that office users on DHCP go to internet on Standard BB, fixed IPs go out on fibre - all OK

 

Have setup a VPN tunnel between the office and 2 datacentres where the servers are kept.

Want to be able to route fixed IPs to be able to use the VPN tunnel but office users not.

 

Problem

Added a rule in the firewall IPgoup_ANy Desitnation VPN >block >all>interface >all anytime

 

All users can still access the VPN tunnel.

 

How can I make the office users not see or access the tunnel ?

Hi gbmartho

I saw that TP-link write "Enhance the Firewall module for VPN" in the released note of the latest firmware.

Maybe you can check your router model and hardware version, if your router is ER6120 V2, ER6020 V2,R600VPN V4, you can try to upgrade the latest firmware.