Rules wrong

[Dougj]

the other day I migrated from asuswrt to merlin on my ax88u router. After doing so my VPNs were gone so I successfully rebuilt them. I set up a couple rules to send two devices over WAN and one rule to send all devices (192.168.50.0/24) in my dhcp range to vpn1 and a second rule to the same IP range to vpn2. I guess in my mind I was only considering only one vpn would ever be active at a time. All worked ok until today I disabled both VPNs. That took my router interface offline as well as my internet on all devices. How do I resolve this?

 

[Dougj]

the other day I migrated from asuswrt to merlin on my ax88u router. After doing so my VPNs were gone so I successfully rebuilt them. I set up a couple rules to send two devices over WAN and one rule to send all devices (192.168.50.0/24) in my dhcp range to vpn1 and a second rule to the same IP range to vpn2. I guess in my mind I was only considering only one vpn would ever be active at a time. All worked ok until today I disabled both VPNs. That took my router interface offline as well as my internet on all devices. How do I resolve this?

Forgot to mention killswitch is active on both vpns.

 

[ColinTaylor]

It's hard to follow your rules without seeing a screenshot. But I'd hazard a guess that one or more of your VPN clients are setup with the killswitch enabled.

 

[ColinTaylor]

Forgot to mention killswitch is active on both vpns.

Try rebooting the router.

 

[Dougj]

Yes killswitch is unfortuately active and a complete reboot resolved nothing. As for the 4 rules the top two were using WAN to send my sec. devices direct to the internet and the third rule uses vpn client 1 to send all other DHCP addresses (in the range provided earlier) down the tunnel while the fourth rule send that same range of addresses down vpn client 2. As mentioned I wrote those assuming only either vpn client 1 or 2 would ever be active at any time.


Since I cannot log into the router how can I override my killswitch settings to off and how can I get to the login page of the router?

 

[ColinTaylor]

Since I cannot log into the router how can I override my killswitch settings to off and how can I get to the login page of the router?

I'm confused. VPN Director controls LAN to WAN routing. It shouldn't restrict LAN to LAN traffic, i.e. access to the router's GUI from the LAN.

 

[Dougj]

My thoughts as well but I can't load 192.168.50.1. As soon as I disabled vpn client 1 (with vpn client 2 already disabled) I was logged out and have not been able to load asus.router.com or 192.168.50.1??

Since my routing rule 3 and 4 specified the 192.168.50.0/24 IP range, could that have taken the GUI offline? Perhaps it should have read 192.168.50.1/24?

Also is there a shell command I can somehow access to disable killswitch?

Thx D.

 

[ColinTaylor]

Can you ping 192.168.50.1 from your PC?

Do you have SSH access to the router?

 

[degrub]

Wireguard VPN Client: killswitch + reboot -> LAN administration lock-out (NTP failure?)

Hi all - title pretty much says it all, but more details are below. I've read through several discussions (example) regarding killswitch changes/issues. FWIW, it appears to me that most have concerned OpenVPN instead of Wireguard connections. AFAIK, none cites issues with NTP sync on boot as a...

www.snbforums.com

 

[ColinTaylor]

Wireguard VPN Client: killswitch + reboot -> LAN administration lock-out (NTP failure?)

Hi all - title pretty much says it all, but more details are below. I've read through several discussions (example) regarding killswitch changes/issues. FWIW, it appears to me that most have concerned OpenVPN instead of Wireguard connections. AFAIK, none cites issues with NTP sync on boot as a...

www.snbforums.com

Following that thread and given the OP is using OpenVPN I suspect the following is the relevant comment:

Loss of access to user interface after application of VPN rule and Killswitch (3004.388.8)

Hi, I updated the latest firmware without reading the changelog (sorry) and found myself without access to local web interface (I've read on other subjects that other people have had the same problem). I had to perform a WPS reset to get the router working again. I then realized that it was due...

www.snbforums.com

 

[Dougj]

Can you ping 192.168.50.1 from your PC?

Do you have SSH access to the router?

I am unable to ping the gateway IP either cabled or wireless and I never enabled SSH.

 

[ColinTaylor]

I am unable to ping the gateway IP either cabled or wireless and I never enabled SSH.

If you have no access to the router you have no choice but to do a factory reset.