Bridge LAN and WAN/OpenVPN

buiz · 2020-09-07T20:52:55.685Z

My setup is as follows:

My primary router with Internet access, 192.168.1.1, has a bunch of clients connected. Standard home Internet setup.
Because I need one of the clients to access Internet only via VPN, I have a GL-AR300M connected to the network. It gets 192.168.1.180 from the primary router that is its WAN + it is set up with 192.168.8.1 and issues 192.168.8.x addresses to its clients.
The GL-AR300M (192.168.8.1) connects to Openvpn and creates a safe tunnel to the Internet for its clients. So far everything works well.
Here’s the challenge: I want the 192.168.8.x clients to be able to access my primary LAN 192.168.1.x clients. So, for example, I want 192.168.8.55 to access Internet only via OpenVPN but to access 192.168.1.10 DIRECTLY.

I have a feeling that the solution lies within the area of bridging interfaces and setting up firewalls correctly. My research on this forum and elsewhere, however, has not born fruit.

Can anybody help with a solution?

alzhao · 2020-09-08T04:41:05.568Z

You need to use vpn policies,

Use domain/ip based and execlude 192.168.1.0/24 network from vpn

image730×685 22.4 KB

buiz · 2020-09-08T05:05:13.040Z

That works. Simple and easy. Many thanks for the advice!!