setup multiple vpn clients on ASUS RT-AC3100

[stewy]

Ok here goes-I have an asus rt-ac3100 using the latest Merlinwrt 380.65.

Now I have it working just fine connected to NordVPN using a Canadian server using clent 1 of the VPN clients, that leaves 4 clients available for setup.

When I turn off Client 1 and then start Client2 to connect NordVPN to a UK server it says it is connected but I cannot connect to any websites get an error about a DNS resolution problem.

If I turn this connection off then turn on the first client everything works as expected.

Am I missing something or what the heck am I doing wrong should you not be able to populate all 5 client servers and then connect to any 1 of them?

Regards jstewart

 

[yorgi]

Ok here goes-I have an asus rt-ac3100 using the latest Merlinwrt 380.65.

Now I have it working just fine connected to NordVPN using a Canadian server using clent 1 of the VPN clients, that leaves 4 clients available for setup.

When I turn off Client 1 and then start Client2 to connect NordVPN to a UK server it says it is connected but I cannot connect to any websites get an error about a DNS resolution problem.

If I turn this connection off then turn on the first client everything works as expected.

Am I missing something or what the heck am I doing wrong should you not be able to populate all 5 client servers and then connect to any 1 of them?

Regards jstewart

Are you using policy rules?
If you are you have to make sure that your ip addresses range are different than that of the first client.
in other words if you have 192.168.1.50 for client one make sure that client 2 has 192.168.1.51 and you need to change your IP addresses according to the VPN client you are logging onto.
So if client A is .50 you need to go to your network settings and change it to that ip address. when you change to client 2 you have to go to your network settings and change it to .51 you cannot be running DHCP if you are logging onto different clients.
Also make sure that you keep the clients turned off when you are not using them. If you have 2 clients enabled at the same time which are from the same company you may get into router conflicts and nothing will work.
let me know if that helps

 

[stewy]

Are you using policy rules?
If you are you have to make sure that your ip addresses range are different than that of the first client.
in other words if you have 192.168.1.50 for client one make sure that client 2 has 192.168.1.51 and you need to change your IP addresses according to the VPN client you are logging onto.
So if client A is .50 you need to go to your network settings and change it to that ip address. when you change to client 2 you have to go to your network settings and change it to .51 you cannot be running DHCP if you are logging onto different clients.
Also make sure that you keep the clients turned off when you are not using them. If you have 2 clients enabled at the same time which are from the same company you may get into router conflicts and nothing will work.
let me know if that helps

hello
well i figured this out and this is my work around
Asus VPN Client setup

Asus router has 5 VPN clients available

Setup each client as required now to switch turn off the active client and then activate the client you wish to use.

Note if you have a kill switch (192.168.1.0/24) or routing IP addresses set to particular devices then you must also set Redirect Internet Traffic to no before turning off the client!

If you want to use policy rules on the client you are switching to then turn on policy rules in Redirect Internet Traffic before starting the client to enable the kill switch on the newly started client.

Repeat the procedure when changing to a new client.


It seems that even though you turn off a client the routing settings in policy rules associated with the client are still active so if you switch clients without answering no to policy rule to route traffic then the kill switch is still active and your new client although it says its connected will have no internet access!

thanks

 

[yorgi]

hello
well i figured this out and this is my work around
Asus VPN Client setup

Asus router has 5 VPN clients available

Setup each client as required now to switch turn off the active client and then activate the client you wish to use.

Note if you have a kill switch (192.168.1.0/24) or routing IP addresses set to particular devices then you must also set Redirect Internet Traffic to no before turning off the client!

If you want to use policy rules on the client you are switching to then turn on policy rules in Redirect Internet Traffic before starting the client to enable the kill switch on the newly started client.

Repeat the procedure when changing to a new client.


It seems that even though you turn off a client the routing settings in policy rules associated with the client are still active so if you switch clients without answering no to policy rule to route traffic then the kill switch is still active and your new client although it says its connected will have no internet access!

thanks

Ok you are confusing a few things.
First of all configure each client so that you can connect to the different servers.
Keep them all OFF and Turn only one ON at a time. You CANNOT have all 5 clients connected at the same time.
Next go to policy rules for each of the clients and give it a range of IP address.
You need to now give specific IP addresses that will go to the Server.
So if you have 5 clients setup with PIA you need to have 5 different IP addresses for the 5 clients.
you cannot do 192.168.0/24 because you are creating router conflicts.
So client 1
192.168.1.70/28 which will give you 65-78 for VPN
Client 2
192.168.1.80/28 which will give you 81-94 for VPN
and so on for all clients and make sure you enable Block routed clients if tunnel goes down
In practice if you want to use client 2 you have to change your IP address to range .81 - .94 there are 15 IP addresses reserved.
You can always change the range to have less IP addresses or you can manually enter only the IP addresses that go to VPN and the resty would go to local ISP
if you ant client 1 you will then change your IP address to .65 - .94 and then you will have access to client 1 once again you are choosing ip ranges that can be on VPN.


Other solution:
Keep every client to ALL traffic and once again turn the client ON only when you have to use it.
Drawback you dont have access to Local ISP
either way you will have to manualy switch stuff around.
Ideally is to have 1 VPN provider for each Client you have. then you could have them all on and bounce around from one server to another but you would always have to change your IP address to dictate what server you will be using.

I had created some scripts at one point that would change my ip address from Canada to US for geo un blocking but gave up on that too because it was a pain in the butt.

Let me know if this helps