I have just finished configuring openvpn server following this guide https://openwrt.org/docs/guide-user/services/vpn/openvpn/basic
Everything works fine without issue.
I would like to create 2 client profile:
When I'm outside I will use my openvpn server to reach internet,without being able to reach any of my lan device at home.
When I'm outside I will use my openvpn server only to reach my lan devices,while I continue surfing the entire internet with my internet connection.
In the basic guide linked above tun0 is configured not in a new zone but as list device on lan configuration.
I know that in order to make a split vpn I can put this inside the client configuration
route 192.168.1.0 255.255.255.0
But even If I put or leave this configuration,I can always reach my lan devices on a 192.168.1.0/24 subnet.
My vpn subnet is 10.0.8.0/24
How can I have a full vpn configuration working preventing me to reach any of my lan devices on 192.168.1.0/24 subnet?
Since the tun0 is defined inside the lan zone as reported by the guide, it's needed a new zone?
Thank you in advance guys!