Multiple VPNs in Merlin?

[kameramandan]

Hi,

I've installed Merlin on an Asus 86 as I wanted to use ExpressVPN from the router itself. I've created two different connections for two different servers, and I've noticed that I can have both connections running at the same time.

I don't really understand what running multiple connections does though... I tried connecting to both and accessing a site that won't work through one (IP banned), but it still won't work unless I disconnect from the one that's banned.

How does the multiple connections thing work and what's the point of running more than one at once?

Thanks

 

[Xentrk]

Hi,

I've installed Merlin on an Asus 86 as I wanted to use ExpressVPN from the router itself. I've created two different connections for two different servers, and I've noticed that I can have both connections running at the same time.

I don't really understand what running multiple connections does though... I tried connecting to both and accessing a site that won't work through one (IP banned), but it still won't work unless I disconnect from the one that's banned.

How does the multiple connections thing work and what's the point of running more than one at once?

Thanks

I use three VPN clients to selectively route streaming media traffic. See x3mRouting on GitHub for more information.

 

[RMerlin]

First of all, keep in mind that the real goal behind a VPN is to create a tunnel between your network, and someone else's network. So, you could, for instance, be remotely working with two remote offices, and want to have VPN connections connected to both offices to be able to access remote resources at both location.

You could also potentially have one tunnel through which you only route your media streamer (to bypass regional locks), and another tunnel for the rest of your network simply to hide your traffic from your ISP.

It simply depends on what your needs are.

 

[kameramandan]

You could also potentially have one tunnel through which you only route your media streamer (to bypass regional locks), and another tunnel for the rest of your network simply to hide your traffic from your ISP.

That's what I'm doing, except my TV's traffic is just routed outside the VPN as I'm not concerned who knows what Netflix shows I'm into. The main problem I'm having is that trying to access a site that works through one VPN server but not the other one still doesn't work if both servers are connected, it only works if I disconnect from the one that's banned it. There are several sites I use which have banned one or the other of these servers, so at the moment I have to manually change the connected VPN server depending on which site I want to access at the time.

How does the firmware handle traffic when two VPNs are connected if no specific routing rules are entered... does it just send it to the first one connected, or does it retry if one fails (seems not), or is it just random? I suppose it would help if I understood how it does things out of the box.

 

[Xentrk]

That's what I'm doing, except my TV's traffic is just routed outside the VPN as I'm not concerned who knows what Netflix shows I'm into. The main problem I'm having is that trying to access a site that works through one VPN server but not the other one still doesn't work if both servers are connected, it only works if I disconnect from the one that's banned it. There are several sites I use which have banned one or the other of these servers, so at the moment I have to manually change the connected VPN server depending on which site I want to access at the time.

How does the firmware handle traffic when two VPNs are connected if no specific routing rules are entered... does it just send it to the first one connected, or does it retry if one fails (seems not), or is it just random? I suppose it would help if I understood how it does things out of the box.

In an SSH session, type the command

ip rule

to display the RPDB routing priority database rules for the OpenVPN and LAN Clients:

Selective Routing resources

• Asuswrt-Merlin Policy-Based-Routing by Eric Sauvageau, Asuswrt-Merlin firmware developer
• How to Setup a VPN client including Policy Rules for PIA and other VPN providers 384.5 07.10.18 by @yorgi on snbforums.com