No VPN Policy - Device Specific

Routers
1

Hi,
I think I figured it out, just adding here for confirmation, for others or in case I get lost again.

Scenario:
I want to three VPN tunnels

  1. No VPN - specific devices
  2. Specific VPN server - specific devices
  3. All devices VPN - all devices except those specified in above tunnels

Flint2 - v4.8.3 (Stock, not OpenWrt flashed)
Policy Mode VPN
Tunnel priority ordered as above - I think this is important because if 3) was before 1) the No VPN tunnel would be overridden.

I am a little uncertain on the No VPN tunnel options to use.
Kill Switch - ON (I don’t want it to failover to the VPN tunnel)
Services from GL.iNet Use VPN - OFF
Allow Remote Access the LAN Subnet - OFF
IP Masquerading - OFF
MTU - EMPTY

At the bottom All Other Traffic - ON

Is is preferred to create a No VPN tunnel or better to use “Exclude Specific Devices” on the main VPN tunnel instead?

2

Hi

I think both methods are fine, just that when using “Exclude Specific Devices,” we need to enable “All Other Traffic,” otherwise these devices won't be able to access the internet.

1 Like