2 routers, 1 local + 1 VPN suggestions

[kkelly10]

Hey everybody,
Been searching like crazy, but there is lots of bad info out there and 4 hours later still can't get everything setup correctly.

Problem: I am an American living in Hong Kong. I need access to both US and HK sites that require local access.
Equipment: Asus RT-N66U with Merlin and Open VPN (US server). VPN is for my work site, apple tv, hulu etc. The problem is if I just use the asus, then when I need local access for HSBC banking, Hong Kong universities library access, etc, I still need my local. I had previously used and still own Apple Extreme 6th and 5th gens for local before the VPN setup. My other ZTE router is too slow to consider.
ISP: Fibre 1000mbps (never hit that but my access is crazy fast) wifi speed is the bottleneck.
Usage: Most of the time, I prefer the VPN and the security it provides, but there is no law against torrents here, so would use local for previously mentioned items and torrents.

Option A.
internet-->AE-->Asus merlin VPN . Would result in 2 separate wifi networks. But would be easy to switch between the two networks when needed. Not sure of all the ports I would need to forward, seems like quite a list.

Option B.
internet-->Asus merlin VPN (with gateways) --> AE used to extend the one network. (the walls in my flat are all solid concrete)

Not sure about setting up gateways since I have never done that. Is it easy to exclude certain sites from the VPN with Merlin? Am I on the right track or not?

Anyway, suggestions much appreciated.
Cheers,
KK

 

[CaptainSTX]

Hey everybody,
Been searching like crazy, but there is lots of bad info out there and 4 hours later still can't get everything setup correctly.

Problem: I am an American living in Hong Kong. I need access to both US and HK sites that require local access.
Equipment: Asus RT-N66U with Merlin and Open VPN (US server). VPN is for my work site, apple tv, hulu etc. The problem is if I just use the asus, then when I need local access for HSBC banking, Hong Kong universities library access, etc, I still need my local. I had previously used and still own Apple Extreme 6th and 5th gens for local before the VPN setup. My other ZTE router is too slow to consider.
ISP: Fibre 1000mbps (never hit that but my access is crazy fast) wifi speed is the bottleneck.
Usage: Most of the time, I prefer the VPN and the security it provides, but there is no law against torrents here, so would use local for previously mentioned items and torrents.

Option A.
internet-->AE-->Asus merlin VPN . Would result in 2 separate wifi networks. But would be easy to switch between the two networks when needed. Not sure of all the ports I would need to forward, seems like quite a list.

Option B.
internet-->Asus merlin VPN (with gateways) --> AE used to extend the one network. (the walls in my flat are all solid concrete)

Not sure about setting up gateways since I have never done that. Is it easy to exclude certain sites from the VPN with Merlin? Am I on the right track or not?

Anyway, suggestions much appreciated.
Cheers,
KK

If you want a simple one router solution here are a couple of suggestions:

1. Look at the dual gateway firmware from Sabai Technology and if you want maximum speed for streaming from US look at adding an accelerator. Downside is that you will have to buy the hardware from them and you apparently already own an ASUS.

2. Look at changing your VPN provider to Astril. They provide some add on firmware for Merlin's firmware that gives you the ability to control which devices and or which locations get routed through the GUI. Downside is that you won't get your full throughput when using Astrill. I could only get 40 down on my 75 connection using their VPN.

3. If you want to spend the time you can program your ASUS to do what you want by creating custom scripts and Iptables. Search the forum and look for samples of other poster's scripts.

As for using two routers in a double NAT situation it works for me. No port forwarding or other special setup required. Just connect your first router to the VPN router LAN - WAN, give your VPN router a static IP in the first routers DHCP range and finally set the second router in its own subnet. Then setup the VPN on the second router.