Make sure that openvpn connection is used

[jojoe]

Hello,

i just got a new Asus RT-AC68U and successfully configured openvpn client. All devices connected to the router uses the vpn connection.

The openvpn client starts with WAN. Everything is working fine.

My question: how can I make sure, that only the VPN connection is used?

When I manually stop the openvpn client, all connected devices will use the normal WAN connection. In case of a connection lost (VPN server is not available) this will be the same situation. How can i prevent this? I like to make sure that all traffic is going through the vpn connection - if the connection is not available there should be no access to the internet/WAN.

Can anyone help me?

Thank you
Joe

 

[jojoe]

Solved

I found a solution on my own.

For anyone who's interested:

Created a firewall-start script containing the following line:

iptables -I FORWARD -i br0 -o eth0 -j DROP

I also created further rules to allow specific IPs to bypass the openVPN connection.

Joe