VPN Redirect Internet traffic Disables VPN

[jmoneill]

I am running AsusWrt-Merlin v380.63_2 on an Asus RT-AC66U. I have successfully setup the VPN and verified that the network facing IP address actually changed to a VPN assigned address. Now I want to allow Netflix traffic through and bypass the VPN. I entered a Redirect Internet Traffic policy rule of: Source IP (the Tivo wireless IP: 192.168.2.126), Destination IP (0.0.0.0), and Iface (WAN). This appeared to work until I re-checked the network facing IP. It reverted to the one assigned by my ISP. I checked the VPN Status page, it told me that I was still connected to the VPN server and the counts were incrementing. I turned off and on the VPN Client and even rebooted the router. It kept telling me I was connected to the VPN server but I still had the ISP IP address. I then changed the Redirect Internet Traffic setting from Policy Rules to No. The VPN Status page still shows me connected to the VPN server but my network facing IP address has now changed to the VPN assigned one. Did I set a wrong parameter for the policy rule?

TIA - John

 

[john9527]

When you enable Policy based rules, the default for all all clients is to be routed through the WAN. So the first thing you have to do for what you want is to set a rule to route everything through the VPN. Use CIDR notation for your subnet as the source (for the default setup it would be 192.168.1.0/24)
You then add the clients you want to go through the WAN (your TIVO rule). WAN rules always take precedence over VPN rules.

 

[jmoneill]

When you enable Policy based rules, the default for all all clients is to be routed through the WAN. So the first thing you have to do for what you want is to set a rule to route everything through the VPN. Use CIDR notation for your subnet as the source (for the default setup it would be 192.168.1.0/24)
You then add the clients you want to go through the WAN (your TIVO rule). WAN rules always take precedence over VPN rules.

That worked perfectly. Kind of a subtle requirement but definitely makes sense. It sounds like this is what I will need for my next project - setting up a cyber security lab on a VLAN. It looks like I would be able to open the VLAN up for testing outside of the VPN. Thanks for your quick response john9527.

 

[howardmoon]

That's not working for me. Any thing I can try to fix it? Running the latest rev from a factory reset.