Question about new multi VPN ability (Flint)

Routers
1

I just want someone to please confirm whether I’m understanding the new multi VPN cascade option which came out in the latest firmware release

You can stack up to 5 VPN tunnels and enable them all but your traffic DOESN’T get passed through a chain of 5 tunnels, it only gets passed through the tunnel in priority 1 position and all the other tunnels are backup incase tunnel priority 1 (first) fails, rather than constantly attempting the same connection until it comes back online? Thanks

2

Yes and you can also assign different tunnels for different decices/ different domains or exclude certain devices from specific tunnels.

2 Likes
3

I have tried the device + domain isolation feature but it didn’t seem to work for me

I enabled priority 1 tunnel from all devices to all services as usual, then enabled priority 2 tunnel from all devices to only cover myip(.)com yet when I went to myip.com it gave the IP and geo location details of priority 1 tunnel. Could you please help me understand what I’m doing wrong?

Thanks

4

Did you exclude my ip from the first tunnel?

5

Hi

Traffic matching in VPN policy mode is prioritized.

Therefore, if the highest-priority tunnel is configured to match all devices and all destinations, all LAN traffic will be routed through that tunnel. The domain-based policy in the second tunnel will not take effect (unless the first tunnel fails and traffic switches over, assuming Kill Switch is not enabled).

In your case, please make sure that:

  1. The tunnel configured for myip.com has the highest priority (priority 1 )
  2. LAN devices are using the router’s LAN IP as their DNS server, and “AdGuard Home Handle Client Requests” is not enabled
2 Likes
6

Yes, it sounds like you could have literally got your priorities wrong.

7

Nope, its just not yet possible to do what I want, this was confirmed in another thread by staff

8

No, but it sounds like what I want isn’t yet possible regardless of whether I exclude sites from one tunnel

9

You tired making the 1st tunnel your single website only and then all others in the 2nd tunnel?

2 Likes
10

You don't exclude the site in this example. Priority 1 + kill switch for myip. Priority 2 for everything else. myip matches priority 1 first; if the tunnel is up it goes out that tunnel. If the tunnel is down it dies (if you don't have the kill switch, it drops to priority 2). Everythg else doesn't match Priority 1 so drops to priority 2 and goes out that route.

1 Like