I just discovered a bug (and a workaround) in ASUSWRT.
The bug is the following:
If you define a VPN client, and have it applied to certain devices, those wired devices will not have any internet connection if that same VPN is used as a wireless guest network.
To replicate the issue, define an OpenVPN connection under VPN. change it's status to NOT apply to all devices. This forces your regular internet connection to be the main one and everything works.
Now go to "Guest Network Pro", and add a VPN network by creating an SSID and assign it the same OpenVPN connection.
When you connect to that SSID, you will be using the VPN connection, and so will all devices connected to that SSID , and they will all work OK.
Now, go back to the VPN connection, and manually select wired devices to apply the VPN to.
All those devices that you selected will not have internet connection at all - neither regular nor VPN.
So the bug is that wired devices don't work at all and wireless devices work through VPN even if not selected on the corresponding devices list.
The workaround (ugly but works) -
duplicate the VPN connection settings under VPN, just use a different connection name. Use the new name and select devices to use it - it will work as expected.
Problems with this workaround: only two VPN profiles can be active, so by duplicating we are running out of options to add another VPN.
Also, it makes it confusing to understand what is going on.
Asus should fix this bug!
The bug is the following:
If you define a VPN client, and have it applied to certain devices, those wired devices will not have any internet connection if that same VPN is used as a wireless guest network.
To replicate the issue, define an OpenVPN connection under VPN. change it's status to NOT apply to all devices. This forces your regular internet connection to be the main one and everything works.
Now go to "Guest Network Pro", and add a VPN network by creating an SSID and assign it the same OpenVPN connection.
When you connect to that SSID, you will be using the VPN connection, and so will all devices connected to that SSID , and they will all work OK.
Now, go back to the VPN connection, and manually select wired devices to apply the VPN to.
All those devices that you selected will not have internet connection at all - neither regular nor VPN.
So the bug is that wired devices don't work at all and wireless devices work through VPN even if not selected on the corresponding devices list.
The workaround (ugly but works) -
duplicate the VPN connection settings under VPN, just use a different connection name. Use the new name and select devices to use it - it will work as expected.
Problems with this workaround: only two VPN profiles can be active, so by duplicating we are running out of options to add another VPN.
Also, it makes it confusing to understand what is going on.
Asus should fix this bug!