Setting up Dedicated VPN - Help?

[Kwan]

I have Merlin 380.57 installed on an RT-AC68U and have been trying to set up a dedicated VPN for a single device.

The VPN itself works without an issue. It is just that I only want this single device to go through this VPN. It seemed to work, with the policy setting but I found that other devices stopped working (I thought they'd default to the WAN, but I'm getting Connected - No Internet), so I added them individually to the policy with the WAN interface.

My Windows machine doesn't have an issue, it is all the Android devieces that seem to Connect - but "No Internet".

Things don't fully work. Is there a better/simpler way to set this up? Maybe this is just completely the wrong way to set it up.

I'd be greatful for any advice.

 

[RMerlin]

Remove all your WAN rules. They are unneeded, as the default policy is to use the WAN. You just need that one VPN rule.

The problem with your WAN clients is most likely the DNS. Leave "Accept DNS Configuration" to "Disabled" and configure DNSFilter with a rule for your VPN client IP, using the first DNS of your tunnel provider (see the PUSH statement logged in System Log at connection time) as a Custom DNS.

You can also alternatively use 380.58 alpha 4, which lets you enable Exclusive mode, and have it apply only on VPN clients, leaving WAN clients to use your ISP's DNS.

 

[Kwan]

Thank you much Merlin!!

Couldn't unfortunately find alpha 4. but once I found where the DNSFilter was buried it all worked like a charm ... and finally what was going on makes sense!

Again, thank you!