VPN client

[agadave]

Hello,
on the asus RT-66U with 380.70 (mode router),
it is possible to use the VPN client on some PCs and not other PCs ?
ex:
PC1/ETH1 use VPN
PC2:ETH2 don't use VPN
wifi: don't use VPN

Thank you

 

[ColinTaylor]

No it's not possible to select different routes based on the physical connection. You can use the VPN's policy routing but that is based on IP address not the physical connection.

 

[agadave]

Ok.
have you a tutorial for use the VPN's policy routing based on IP address to advise me ?

 

[ColinTaylor]

Use the router's LAN > DHCP Server > Manually Assigned IP... to allocate fixed IP addresses to the clients you're interested in. Then setup policy based routing for those IP addresses:

https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-routing

 

[agadave]

Thank you.
It's possible with PPTP VPN ou just OpenVPN ?

 

[ColinTaylor]

Just OpenVPN.

 

[agadave]

Thank you

 

[Martineau]

Hello,
on the asus RT-66U with 380.70 (mode router),
it is possible to use the VPN client on some PCs and not other PCs ?
ex:
PC1/ETH1 use VPN
PC2:ETH2 don't use VPN
wifi: don't use VPN

Yes.

e.g. 2.4 Guest WiFi 1 SSID Wl0.2 and Switch Port 4 can both be re-assigned to a new bridge interface say 'br1' on a new subnet (aka VLAN) and routed via a VPN.

 

[Martineau]

No it's not possible to select different routes based on the physical connection. You can use the VPN's policy routing but that is based on IP address not the physical connection.

Actually RPDB rules allow you to also specify the physical interface
e.g

ip   rule   add   prio   1000   from   1.2.3.4/28    iif    br1    lookup    dmz

 

[ColinTaylor]

Yes.

e.g. 2.4 Guest WiFi 1 SSID Wl0.2 and Switch Port 4 can both be re-assigned to a new bridge interface say 'br1' on a new subnet (aka VLAN) and routed via a VPN.

Actually RPDB rules allow you to also specify the physical interface
e.g

ip   rule   add   prio   1000   from   1.2.3.4/28    iif    br1    lookup    dmz

I was talking about what was possible using the router's normal web interface, not what was possible with user-written scripts.