Flint 2 - Split Tunnel across Wifi Bands

Hello,

Is it possible to have one Wifi (2.4ghz) without VPN, and one Wifi (5ghz) with VPN running at the same time? If so, how can this be done?

My use case is that I want one connection for better speed and no issues for co-residents using, then another Wifi band with VPN features whenever anyone would like to use. Most of the time it would be myself using this with 3 devices running Windows, Linux, and Android.

I searched this and it sounds extremely difficult but possible. I have 0 experience with any coding. I am using ProtonVPN.

Any guidance is appreciated. Many thanks.

First, set up your WiFi. Name the 2.4GHz one SSID_NoVPN and the 5GHz one SSID_VPN. Next, create a new network interface called vpn and set it to use tun0. Install OpenVPN if you haven’t already, and set up ProtonVPN with your config file in /etc/openvpn/protonvpn.conf.

Then, add firewall rules to route traffic from the 5GHz WiFi through the VPN. Create a new firewall zone for the VPN and set up forwarding from LAN to VPN. Add custom routing rules to direct VPN traffic through tun0. Finally, set up DHCP for the VPN network and restart all the services.

1 Like

Thank you so much. How do I set the new network interface to tun0? I have gone to advanced settings > luci > interfaces and add new interface but I can't see how to set it to tun0, I've tried searching but no luck.

Here is the correct way:

  1. tun0 is not created by you, it is created by openvpn automatically. So just set up openvpn or wiregurad on the router.

  2. Turn 2.4G guest wifi.

  3. In vpn policies, choose vlan-based and choose guest wifi not to use vpn.