Open VPN server - do not route all traffic via VPN server

Routers VPN, DNS, Leaks
1

Hello,
I just purchased a Flint 3 and setup an Open VPN Server. Currently though when a client connects all traffic goes through the router. How can I set it up so
Only traffic going to my home LAN 192.168.8.0/24 goes through the VPN.
Everything else (web browsing, YouTube, etc.) stays on the client’s local Internet

Thnaks

5

Hi

To achieve this, we can add the following two lines to the exported client.ovpn file.

route 192.168.8.0 255.255.255.0
pull-filter ignore "redirect-gateway def1"
  • The pull-filter line ensures the VPN doesn't try to send all internet traffic through the tunnel.
  • The route line explicitly tells the client to send traffic destined for the 192.168.8.0/24 network through the VPN tunnel.

If the client is also a GL.iNet router, then we will need to use the VPN policy mode as follow.

image
image1308×911 58.9 KB

For more details, please refer to VPN Dashboard - GL.iNet Router Docs 4.

1 Like
6

The VPN policy routing is a terrific addition in 4.8 and works well on my Beryl AX. I look forward to the possibility that it will be added to my Mango and Beryl; only a few GL.iNet routers have it now.

In my experience trying split-tunnelling using the pull-filter ignore option with firmware before 4.8, it didn't work for the Mango, Beryl, Mudi, or BerylAX. But that was some time ago.

7

That works perfectly thanks!