GL-AR750S Cannot Connect to LAN when on VPN

I think I’ve seen people here with the same problem but I have not see a solution .
I am using the AR-750S as a VPN router
I have an incoming Internet cable from my network connected to the AR-750S
I am then sharing the AR750S with WiFi

When I connect to the AR750S WIFI, everything works well, I have access to the Internet and I can access all the local hosts on the LAN (192.168.0.0/24)

As soon as I activate VPN CLient on the AR750S everything goes as expected connecting to the internet
I connect to the AR750S WIFI and I surf the internet via VPN no problems
But as soon as I try to ping or ssh a machine on the LAN, I cannot connect.

I think the routing is correct but something is blocking all outgoing ports to the LAN, could this be a setting I’ve missed ?

ping 192.168.0.21
PING 192.168.0.21 (192.168.0.21) 56(84) bytes of data.
From 192.168.8.1 icmp_seq=1 Destination Port Unreachable

traceroute 192.168.0.21
traceroute to 192.168.0.21 (192.168.0.21), 30 hops max, 60 byte packets
1 console.gl-inet.com (192.168.8.1) 2.443 ms 2.651 ms 4.435 ms
2 console.gl-inet.com (192.168.8.1) 4.430 ms 4.421 ms 4.412 ms

ip route list
default via 192.168.8.1 dev wlp6s0 proto dhcp metric 600
169.254.0.0/16 dev wlp6s0 scope link metric 1000
192.168.8.0/24 dev wlp6s0 proto kernel scope link src 192.168.8.197 metric 600

Can someone please help me. I’m obviously missing a step or doing something wrong in the setup.
Thanks in advance.

After connecting to the VPN, all data will go through the VPN channel. If you need the local LAN not to go through the VPN, you can set 192.168.0.0/24 in the VPN policy to not go through the VPN.

1 Like

This makes sense, not what I expected but makes sense…
This is not as easy as it sounds, so on the AR750S I need to find VPN policies and set a route so my LAN is accessed directly and not through the VPN

Thanks very much, I will check this when in that office.

Thanks VERY MUCH… I really appreciate it, works like a charm!