OpenVPN client & static routing with stock firmware?

[kobari]

Hi,

I am considering buying AC-68u and will definitely use OpenVPN client. But, there are some basic rules that I would like to set like:

If target IP is X.X.X.X, for all clients bypass VPN and route via ISP gateway
If client IP is Y.Y.Y.Y, bypass VPN and route via ISP gateway

Is this possible with the stock firmware?

Thanks.

 

[RMerlin]

Hi,

I am considering buying AC-68u and will definitely use OpenVPN client. But, there are some basic rules that I would like to set like:

If target IP is X.X.X.X, for all clients bypass VPN and route via ISP gateway
If client IP is Y.Y.Y.Y, bypass VPN and route via ISP gateway

Is this possible with the stock firmware?

Thanks.

Selective routing is not possible with the stock firmware. You need a custom firmware that lets you configure custom firewall rules.

 

[kobari]

Hi,

Thanks for the prompt reply, can we use Asuswrt-Merlin (your firmware) for this? Would it be possible with this?

Also, just wanted to ask you, DD-WRT is complicated as hell Is Asuswrt-Merlin simpler for a novice user?

Thanks a ton again...

 

[RMerlin]

Hi,

Thanks for the prompt reply, can we use Asuswrt-Merlin (your firmware) for this? Would it be possible with this?

Yes. Look in the Asuswrt-Merlin sub-forum here, there are multiple threads dedicated to VPN routing.

Also, just wanted to ask you, DD-WRT is complicated as hell Is Asuswrt-Merlin simpler for a novice user?

Thanks a ton again...

For general usage, Asuswrt-Merlin is just as easy as the stock firmware, as they share the same interface. However, what you want to do is fairly advanced, regardless of the firmware being used, as it involves playing with Linux's networking.

 

[kobari]

For general usage, Asuswrt-Merlin is just as easy as the stock firmware, as they share the same interface. However, what you want to do is fairly advanced, regardless of the firmware being used, as it involves playing with Linux's networking.

Ah sure, that one is. But, DD-WRT is really powerful, but at the same time, has tons of other options which are confusing as hell for a regular user.

 

[RMerlin]

Ah sure, that one is. But, DD-WRT is really powerful, but at the same time, has tons of other options which are confusing as hell for a regular user.

True. I try to avoid going down the "feature creep" path for that reason. More isn't always better.