378.56_2: OpenVPN "Redirect Internet traffic" policies not working

[jz_]

Hi guys, I've got an extremely frustrating issue that I've spent hours on and would love a little direction.

My OpenVPN is set up and working great if I tell router to redirect all internet traffic to the VPN. All works as expected.

However, trying to use policy rules to make just ONE client go to the VPN, completely fails to work. I have tried on my gaming console and on my Nexus 6. Both just keep using the default gateway. I have tried nearly every option and pored over all kinds of SNB threads related to the issue but cannot get a working solution. The only thing I haven't tried is an NVRAM reset and setting everything up again.

Pic of settings attached

Spoiler

 

[jz_]

As soon as I post this I see another thread about this issue on this version, and the OP posted:

Soooooooo sorry for double post, but I have just rolled back to 378.54_2 and got policy rules working again. (Also didn't work with 378.55)
I haven't reconfigured any option. The only things I have modified in VPN config are security certs and keys, which were lost because they were moved to jffs after 378.55.

http://www.snbforums.com/threads/openvpn-policy-rules-feature-doesnt-work-ac66u-solved.28192/

PLEASE fix this issue

 

[RMerlin]

As soon as I post this I see another thread about this issue on this version, and the OP posted:


http://www.snbforums.com/threads/openvpn-policy-rules-feature-doesnt-work-ac66u-solved.28192/

PLEASE fix this issue

There's nothing to fix there, the feature is working correctly. If you re-read that thread, the issue ended up being a configuration error on his part caused by a custom script he had created.

So double check your configuration.

 

[jz_]

There's nothing to fix there, the feature is working correctly. If you re-read that thread, the issue ended up being a configuration error on his part caused by a custom script he had created.

So double check your configuration.

OP says: "I haven't reconfigured any option."

Certs and keys being set up again don't impact anything. If those were misconfigured he wouldn't have been able to get a connection. As I said my OpenVPN works perfectly if I tell it to redirect all traffic, but using the custom route policies option does NOT work. What is there to misconfigure? You type the LAN IP (as seen in screenshot) and then leave 0.0.0.0 as destination, and set it to VPN.

It's supposed to work at that point, but still does not. Are you suggesting I'm typing in my LAN ip wrong? I'm not

EDIT: Ah just checked his second edit, but it doesn't apply to my issue because I'm not using any custom scripts nor do I even have jffs set up. I was trying to accomplish this directly in GUI

 

[RMerlin]

Are you using IPv6? If yes, that will bypass the tunnel, as OpenVPN only handles IPv4 traffic.

Double check the phone's IP. Also, try accessing a website such as www.whatismyip.com to confirm whether you are going through the tunnel or not - it should report your tunnel's IP while routed through the tunnel.

 

[jz_]

No, I'm not using IPv6 and yes the Phone's IP (and the console I tried it on) is correct. I know how to check my IP, the option simply isnt working

 

[RMerlin]

I just re-tested it here using VPNBook, and it's working properly for me. IP address of my test VM changes to the tunnel's IP once the tunnel is connected.

What do you have in the Custom configuration section at the bottom of your configuration page? Which tunnel provider are you using?

 

[Ois]

my ac87u is running on 378.56_2.
This feature is working fine for me....my smart TV is in the US and everything else is where it really is.

 

[jz_]

Just reset to factory settings, set up the VPN, set it to redirect all traffic and everything works.

Setting it to use policy rules and adding my computer's LAN IP once again did not work. It did not attempt to use the tunnel when I checked my IP

 

[jz_]

Got it working with another factory restore then a forced NVRAM reset.

Must have been a lingering config bug that likely won't happen to others