Default route via VPNC

I'm using vpnc and like to route all traffic through that tunnel. I kind of got that solved like this:

In Luci->Firewall I have set wan to [x] Masquerading and Advanced Settings->Covered devices to vpn. Is that correct?
What does Covered devices mean in this case?

What happens if the VPNC connection fails for whatever reason and how can I force to use the tunnel and nothing else to be sure the connection is trusted?

You should remove the vpn interface from wan firewall zone. Create a new zone, say vpn, same attributes as wan and assign the vpn interface there. Then allow forwarding from lan to vpn and remove forwarding from lan to wan.

1 Like