VPN Client for only specific MAC/IP addresses

[smrowley]

I configured a VPN client on the router, and by default, the vpn client applies to all clients connected to the network. I would like for majority of clients to be on open traffic, but only certain MAC addresses or IP addresses to be on vpn. Is there any way to configure this?

 

[L&LD]

Yes. State router and firmware used.

 

[smrowley]

Yes. State router and firmware used.

Sorry, I thought this was under the Asuswrt-merlin channel.

I am using an Asus RT-AC66U with Asuswrt-merlin firmware, version 380.58

 

[highwalker]

Sorry, I thought this was under the Asuswrt-merlin channel.

I am using an Asus RT-AC66U with Asuswrt-merlin firmware, version 380.58

This is easily possible and very elegant in RMerlin firmware. Check the Readme with the downloaded firmware package:

- Policy routing for the OpenVPN client (based on source or
     destination IPs), sometimes referred to as “selective routing")

Just to add that this works on the IP not on MAC addresses.

 

[L&LD]

Sorry, I thought this was under the Asuswrt-merlin channel.

I am using an Asus RT-AC66U with Asuswrt-merlin firmware, version 380.58

I would try the 380.59 Beta 1 version of the firmware instead.

 

[smrowley]

This is easily possible and very elegant in RMerlin firmware. Check the Readme with the downloaded firmware package:

- Policy routing for the OpenVPN client (based on source or
     destination IPs), sometimes referred to as “selective routing")

Just to add that this works on the IP not on MAC addresses.

Thanks, you are awesome!! I will check this out.

 

[smrowley]

I would try the 380.59 Beta 1 version of the firmware instead.

Why do you recommend the beta instead? Does it have some new features that 380.58 doesn't? Thanks for your response.

 

[highwalker]

Why do you recommend the beta instead? Does it have some new features that 380.58 doesn't? Thanks for your response.

I am using RT-AC88U and using the beta. It works great. Its upto you to use the stable version or the beta. If you want to test the bleeding edge software version and help the developer with feedback, you can use the beta.

Just remember to set the DNS to “Exclusive” and Redirect Internet Clients to “Policy Rules” to configure specific VPN access to client IPs.

 

[L&LD]

Why do you recommend the beta instead? Does it have some new features that 380.58 doesn't? Thanks for your response.

It has proven to be the more stable option vs. the version you are now using, is why.

 

[smrowley]

It has proven to be the more stable option vs. the version you are now using, is why.

Ok, sounds good. I will flash it tonight!