All devices talking to a specfic IP via VPN

[Weggy]

Hi,

I have a ASUS RT-AC5300 running Asuswrt-Merlin 384.14.

I'm trying to understand if and how I can setup all traffic to a specific IP e.g. 8.8.8.8 to go via VPN. But any traffic to any other IP, to go via WAN. Is this possible and if so how should the setup within the VPN Client "Advanced_OpenVPNClient_Content.asp"?

Many Thanks

 

[ColinTaylor]

https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-routing

 

[Weggy]

If I wanted to do this for www.snbforums.com, how would I enter it? The I.P. I see is "104.27.127.97"

Pinging www.snbforums.com [104.27.127.97] with 32 bytes of data:
Reply from 104.27.127.97: bytes=32 time=5ms TTL=56
Reply from 104.27.127.97: bytes=32 time=5ms TTL=56
Reply from 104.27.127.97: bytes=32 time=5ms TTL=56
Reply from 104.27.127.97: bytes=32 time=5ms TTL=56

So would it read?

RouteSnbforums    0.0.0.0        104.27.127.97    VPN

Or something else?

 

[ColinTaylor]

That's correct. Although bear in mind that most popular websites have multiple IP addresses and these often vary depending on the client's geographic location.

C:\Users\Colin>nslookup www.snbforums.com
Server:  RT-AC68U.home.lan
Address:  192.168.1.1

Non-authoritative answer:
Name:    www.snbforums.com
Addresses:  2606:4700:20::681b:7f61
          2606:4700:20::681b:7e61
          104.27.127.97
          104.27.126.97

 

[Weggy]

Is there a method of defining a setting on a router per website?

So for example:
www.snbforums.com = VPN
www.google.com = WAN

Looks like IP won't work anyway as I can't access all websites via IP "Error 1003 Direct IP access not allowed"

 

[ColinTaylor]

Is there a method of defining a setting on a router per website?

Not through the GUI. As mentioned at the end of the wiki article you'd have to use a script that dynamically creates IPSET lists that contain all the IP addresses for the websites you're interested in. Here's the direct link to such a script:

https://www.snbforums.com/threads/x3mrouting-selective-routing-for-asuswrt-merlin-firmware.57793/

 

[Weggy]

Wowerz, that looks like lots of steps. But thank you @ColinTaylor

@RMerlin would it be possible to make this a GUI driven feature? I'd love to see it if it's possible.

 

[RMerlin]

Wowerz, that looks like lots of steps. But thank you @ColinTaylor

@RMerlin would it be possible to make this a GUI driven feature? I'd love to see it if it's possible.

No. My implementation is based on a routing table, which has no notion of name resolution. It can only work with IP addresses.