Routing guest 1 clients thru vpn client tunnel while access intranet set to disable

[ThelostIcon]

Trying to route some devices on guest 1 thru vpn client, seems to work ok if i enable the acess intranet option, but obviously that defeats the purpose of trying to isolate guest 1 from lan. When i disable intranet acess, guest 1 drops the vpn tunnel. I tried adding 192.168.101.0/24 which is my guest 1 range to vpn director, but no dice. Is this a limitation or am i missing something. Tried yazfi already, it did the trick, but for some reason my ui keeps freezing every time i click between yazfi and guest tabs, even on a clean factory restore, so i had to unistall.

 

[eibgrad]

Mapping SSID to VPN Client

I have devices that can't run the NordVPN client like TV's and Apple TV so I was hoping to do a simple guest SSID mapping to OVPNx using VPN Director policy rules. Then if I want to use VPN on those devices I can simply connect to the specific guest network and not have to change router configs...

www.snbforums.com

 

[ThelostIcon]

Thanks for that, i think i understand the problem now after reading that a few times. Im totally new to code and scripts and this solution may be beyond my current skills, i did manage to install and unistall yazfi though, but they really made that process dummy proof. I suppose this problem has no non-code solution?

 

[eibgrad]

You either have to use YazFi or those firewall rules I indicated.

For your convenience, all you have to do is copy/paste the following into the terminal window of an ssh session and it will create and install the necessary firewall-start script for you. Then reboot.

#!/bin/sh

SCRIPTS_DIR='/jffs/scripts'
SCRIPT="$SCRIPTS_DIR/firewall-start"

mkdir -p $SCRIPTS_DIR

create_script() {
cat << 'EOF' > $SCRIPT
#!/bin/sh
iptables -I FORWARD -i br1 -o tun1+ -j ACCEPT
iptables -I FORWARD -i br2 -o tun1+ -j ACCEPT
EOF
chmod +x $SCRIPT
}

if [ -f $SCRIPT ]; then
    echo "error: $SCRIPT already exists; requires manual installation"
else
    create_script
    echo 'Done.'
fi
:

You also have to make sure you set Administration > System > "Enable JFFS custom scripts and configs" to Yes. The script will also NOT install if there's already a firewall-start script present, even its own from a prior installation. This is done to prevent accidentally overwriting the same file from some other utility (e.g., YazFi).

If you ever need to uninstall it, just use the following command.

rm -f /jffs/scripts/firewall-start

 

[ThelostIcon]

Thank you for taking the time to dumb it down for me, will give it a try