How to set device not to use VPN?

[JohnD5000]

I set up a vpn on my router (GT-AC2900) on VPN Client tab in client1 with my VPN provider. That is working fine. However, I have a firestick and an app on the firestick doesn't work. It says there is a VPN on, shut it off. That's fine, I don't need the VPN for the firestick. So, I'd like to shut the VPN off just for the firestick. I have set up all my devices on the LAN with a IP address under the DHCP server. The firestick is 192.168.1.161.

How do I tell the Merlin to not direct the firestick through the VPN but to just use the regular (non-vpn) internet?

 

[Tech9]

Here:

VPN Director

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

 

[JohnD5000]

Thanks,
I read the article. I have a few questions:

1) The example in the article had the VPN Client set on Client5 instead of Client1. Should I reset my VPN to client5?

2) Is there a way to set up a rule for a range of devices i.e.
192.168.1.161 - 192.168.1.170
or does each device need to have a separate rule?

 

[ExtremeFiretop]

1) The example in the article had the VPN Client set on Client5 instead of Client1. Should I reset my VPN to client5?

Use whichever VPN client you wish.
It makes no difference, you can have up to 5 at once handling different routes.

Just set the rule to use whichever VPN client you want; if you wish to use that VPN client, or WAN to bypass the VPN client.

2) Is there a way to set up a rule for a range of devices i.e.
192.168.1.161 - 192.168.1.170
or does each device need to have a separate rule?

At the article linked by Tech9; it mentions: "Subnets in CIDR notation (i.e. 192.168.50.0/24) can also be used to cover IP ranges."
So in your example, you could do: 192.168.1.161/28 which means a usable range of: 192.168.1.161 through 192.168.1.174 (14 usable IPs) which covers that range.

 

[pusb87]

2) Is there a way to set up a rule for a range of devices i.e.
192.168.1.161 - 192.168.1.170
or does each device need to have a separate rule?

Yes, use this web tool to calculate the rules for the range of ip address's

ARIN - American Registry for Internet Numbers

account.arin.net

 

[JohnD5000]

Thanks all. I have everything working now except 1 thing. There is one website that I need to go to that will not work with a VPN.

Is there anyway to set something up so that a specific website will NOT go through the VPN but all other traffic will?

 

[ExtremeFiretop]

Thanks all. I have everything working now except 1 thing. There is one website that I need to go to that will not work with a VPN.

Is there anyway to set something up so that a specific website will NOT go through the VPN but all other traffic will?

For domain based routing, look into one of the add-ons.

There's x3mRouting which is not getting updates for years:

x3mRouting - x3mRouting ~ Selective Routing for Asuswrt-Merlin Firmware

x3mRouting Version 2.4.0 now available! 29 September, 2020 Migrating from Version 1.0 Version 2.0.0 Update Process - update instructions Version 2.0.0 Changes - see what's changed! x3mRouting includes selective routing features for LAN Clients, OpenVPN Clients and OpenVPN Servers. If coming...

www.snbforums.com

And Domain Based Routing which is actively developed:

DomainVPNRouting - Domain VPN Routing v3.0.5 ***Release***

Domain VPN Routing is a tool used to route specific website domains to specific VPN tunnels or override all traffic being routed to a VPN tunnel to directly route through a WAN interface. ***v3.0.5 Release**** This is the release information regarding v3.0.5, please read the notes carefully...

www.snbforums.com

 

[JohnD5000]

For domain based routing, look into one of the add-ons.

There's x3mRouting which is not getting updates for years:

x3mRouting - x3mRouting ~ Selective Routing for Asuswrt-Merlin Firmware

x3mRouting Version 2.4.0 now available! 29 September, 2020 Migrating from Version 1.0 Version 2.0.0 Update Process - update instructions Version 2.0.0 Changes - see what's changed! x3mRouting includes selective routing features for LAN Clients, OpenVPN Clients and OpenVPN Servers. If coming...

www.snbforums.com

And Domain Based Routing which is actively developed:

DomainVPNRouting - Domain VPN Routing v3.0.5 ***Release***

Domain VPN Routing is a tool used to route specific website domains to specific VPN tunnels or override all traffic being routed to a VPN tunnel to directly route through a WAN interface. ***v3.0.5 Release**** This is the release information regarding v3.0.5, please read the notes carefully...

www.snbforums.com

Thanks

 

[DrTurk]

In order to bypass the VPN for the Eyeglassworld.com site, I converted the URL to IP using www.nslookup.io/website-to-ip-lookup and added the following rule to VPN Director

I hope this helps.

 

[JohnD5000]

In order to bypass the VPN for the Eyeglassworld.com site, I converted the URL to IP using www.nslookup.io/website-to-ip-lookup and added the following rule to VPN Director
View attachment 64177
I hope this helps.

Thanks, since I only have 1 site, this method is probably better for me than running the DomainVPNRouting script

 

[ExtremeFiretop]

Thanks, since I only have 1 site, this method is probably better for me than running the DomainVPNRouting script

Nothing wrong with that method. It works. It's just more manual, but if the website your bypassing has a static address it would work fine, the benefit of the add-on is it constantly monitors the domain and updates the IP addressing automatically via cron job if they change.

You know your situation best; just figured you should be aware. I got tired of manually updating addresses myself when I tried that in the past.

 

[JohnD5000]

Nothing wrong with that method. It works. It's just more manual, but if the website your bypassing has a static address it would work fine, the benefit of the add-on is it constantly monitors the domain and updates the IP addressing automatically via cron job if they change.

You know your situation best; just figured you should be aware. I got tired of manually updating addresses myself when I tried that in the past.

Thanks, good info to know if my situation changes.