Can i route only specific clients through my OpenVPN, which is setup on AsusWrt Merlin ?

[johnyb0y]

I'm pretty new to VPNs and how to use one and have a question regarding using OpenVPN on a router with AsusWRT Merlin (AC-87u, 380.66_6)

Can i setup the OpenVPN in a way, that only specific clients in my LAN use it as WAN connection ? For example only selected static IPs in my Lan ?

I learned that on DD-WRT it's possible using iptables, so i guess that might be possible on AsusWRT Merlin, too ? But is there maybe a gui for this ?

Thanks for your answers!

 

[Xentrk]

I'm pretty new to VPNs and how to use one and have a question regarding using OpenVPN on a router with AsusWRT Merlin (AC-87u, 380.66_6)

Can i setup the OpenVPN in a way, that only specific clients in my LAN use it as WAN connection ? For example only selected static IPs in my Lan ?

I learned that on DD-WRT it's possible using iptables, so i guess that might be possible on AsusWRT Merlin, too ? But is there maybe a gui for this ?

Thanks for your answers!

Yes, that is called Policy Rules. You define static IP address, then in the OpenVPN client screen, you select Policy Rules. A list is displayed where you can enter the ip address of the clients that you want to use the WAN and those that should use the VPN. Much easier than creating iptable rules.

If you go to the VPN forum, @yorgi has a guide on how to set this up. It is aimed at PIA customers. I wrote another one for TorGuard customers. The links are:
https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-i.38281/

https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-ii.38282/

https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-iii.38283/

A link to @yorgi guide is in the article I wrote. He covered the policy rules in depth so I refer readers to the article he wrote.

 

[johnyb0y]

Yes, that is called Policy Rules. You define static IP address, then in the OpenVPN client screen, you select Policy Rules. A list is displayed where you can enter the ip address of the clients that you want to use the WAN and those that should use the VPN. Much easier than creating iptable rules.

If you go to the VPN forum, @yorgi has a guide on how to set this up. It is aimed at PIA customers. I wrote another one for TorGuard customers. The links are:
https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-i.38281/

https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-ii.38282/

https://www.snbforums.com/threads/torguard-openvpn-2-4-client-setup-for-asus-merlin-380-65-380-65_2-part-iii.38283/

A link to @yorgi guide is in the article I wrote. He covered the policy rules in depth so I refer readers to the article he wrote.

Thank you! Much Appreciated!

 

[johnyb0y]

Another question: I can't see the "Policy Rules" Option in my OpenVPN tab. Do you have any idea why ?
Thanks!

Screenshot: http://imgur.com/a/j8ble

EDIT: Nevermind. You seem to need TUN to use Policy Rules.

 

[Galaxysurfer]

Give this a try if you havent seen it already for the nordvpn

https://nordvpn.com/tutorials/asuswrt/
https://nordvpn.com/tutorials/asustwrt-merlin/ ***

Warning though that me & several others here have had connection issues since an upgrade to 380.67. something is not playing nice with each other. dont know if it is a router issue (config) or nordvpn one or combo there of.

For setting up device specific routing go to settings at bottom of page (openvpn) and choose an accept dns configuration as well as redirect internet traffic to yes then input the appropriate ip for device & if you want it to bypass or go through vpn. I think all you would have to do is substitute provider user & password for other provider & appropriate keys etc i have never personally tried using multiple providers at once. Good luck!

 

[wheelq]

Another question:
Is there any way for selecting IPs which should have access to the VPN tunnel? I am not asking about the traffic redirection, but just for access. Lets say I got VPN connection opened using the router, but I dont want any device in my home network to access devices on the other side of the tunnel (I am tunneling to another router), apart from the selected ones (to access another router admin page and access the printer)