How do I set er605 to allow ONE IP to bypass the VPN
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I've got an ER605 and configured it to connect to NORD VPN via an 'Open VPN Client' on the router so that all internet traffic is sent over that VPN connection.
I have a couple things I host on this IP via NAT / port forwarding. Those work when the VPN is disabled, and I want to set them to bypass the VPN.
I setup an IP group and Ip addresses containing the short span of addresses, made sure load balancing was enabled, then configured a rule in policy routing to with the source that IP group and the destination 'ipgroup_any' to the wan1 connection.
I was told this would cause those IP addresses to NOT pass through the VPN connection, but rather directly out via my internet providers WAN IP address.
It's not working out that way however. Literally first day with the router and found the instructions on line, so I figured I'd check; Am I approaching this in the right way? is there an easier more effective way to do this? Other routers I've seen literally let you exclude a list of IPs from the VPN or select which addresses are or aren't routed through the VPN.
Any suggestions or assistance is MUCH appreciated!
Yes, I mean that.
Yes, at least for now. The OVPN has not been supported in the Policy Routing. Dev is aware of this request, which others have brought up.
The VPN tunnel will be considered as a WAN if the PBR supports the OVPN/WG. Its name is like "OVPN tunnel" or so.
I'm not sure i understand what you're trying to say..
Are you saying that the feature that is in the firmware /setup for this device, simply doesn't work?
Are yous aying there is NO way to have one of my LAN devices bypass the VPN client on this router?
Yes, I mean that.
Yes, at least for now. The OVPN has not been supported in the Policy Routing. Dev is aware of this request, which others have brought up.
The VPN tunnel will be considered as a WAN if the PBR supports the OVPN/WG. Its name is like "OVPN tunnel" or so.
From sample attached below, I have added openvpn client profile. Target network device is as example: 192.168.42.55.Upon enabling openvpn client. I will have vpn access to targeted local device 192.168.42.55, but also to all other devices residing under same vlan. Also, I'm only using WAN1. I'm trying to force openvpn to only allow access to local device 192.168.42.55 and the rest of network devices not to. If you have a better solution, please provide some guidance?.