Internet Kill Switch for VPN Policy based on Client

[Wowotoe]

Hi,

Is there a way to enable internet kill switch just for the clients defined to route thru VPN? I noticed when the VPN service is off or disrupted, the router automatically switch 'VPN-routed' clients to non-VPN route.

If I turn on the global internet kill switch, then it'll block the non-VPN clients.

By the way, this is on Flint 2 (MT6000).

Thanks

[admon]

The VPN Killswitch for routed clients is always active and will kick in as soon as the VPN connection drops (but not if manually disabled!)

There are no other options.

[Wowotoe]

Cool! Thanks for the info.

[ChrisP]

Not that I want to, but how can it be manually disabled on the Brume 2? (just so I know how NOT to do it)..

I've got two devices under VPN Policy Based on Client Device, set to "Use VPN" based on MAC Address. Only Two TV Sticks that need to be connected via a foreign IP.

Need this setting to always be "ON". Should "Block Non-VPN traffic" be enabled?

[j2zero]

Here is how I achieved what you are after.

Suggestion* Killswitch for VPN when VPN is disabled

I have the same desire as other users on this forum with regards to the "Killswitch" functionality. If I am using policy based routing (allowing only certain Mac addresses to access the VPN) I assume that if the Wireguard client was disabled (turned off) then the the policy based devices that are specified to go via the VPN would NOT hit the clearnet (WAN) that to me is a Killswitch. However, if the Wireguard client has been disabled / turned off then devices will use the WAN, only when the Wi…

"Block Non-VPN Traffic" is left toggled off.