Setting up a dedicated VPN VLAN

[tmomas]

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.

[trendy]

@heyho

And one last question. Now I am all up and running what is the syntax of the rule I would setup to say if I am a specific ip address then pass all my traffic through my VPN interface (VPNGEN)

Just like you have it here.

Setting up a dedicated VPN VLAN

So could make the following change: config rule option in 'lan' option src '192.168.0.3' option lookup '100' config route option interface 'vpngen' option target '0.0.0.0' option netmask '0.0.0.0' option metric '200' option table '100' Would that just route any traffic from a device that I have setup with a static ip of 192.168.0.3 through the VPN or am I missing something? And if I invoke OpenVPN and the VPN interface how do I …

[heyho]

Trendy.

Thanks for all your help. Just quite get the syntax right to be able to filer only 192.168.0.x through the VPN but I will keep on trying over the coming days.

Problem is I have most the time when i am accessing it remotely and I keep on stopping my dynamic dns connection lol

[heyho]

I still not getting this. And it is starting to annoy, me as it must be a logical thing as Mt Spock said (or my age).

So my OpenVPN is all setup without traffic going through it I have three interfaces - LAN, WAN and VPN and three zones - lan (lan -> wan+VPNZone), wan and VPNZone. I also tried setting up a traffic rule within Luci that takes 192.168.0.3 ip address in lan and sends it to VPNZone.

What am I missing.

By the way invoking:

config rule
        option in 'lan'
        option src '192.168.0.3'
        option lookup '100'

config route
        option interface ''VPN"
        option target '0.0.0.0'
        option netmask '0.0.0.0'
        option metric '200'
        option table '100'

seems to send all traffic i.e. I lose remote connection

[trendy]

@heyho

option src '192.168.0.3'

Try with 192.168.0.3/32

@heyho

option interface ''VPN"

This is case sensitive, so make sure you have interface VPN and not vpn. Also use ' instead of " (although I've seen them both).

If you still have issues post here the following:
uci show network ; ip -4 addr ; ip -4 ro ; ip -4 ru ; iptables-save

[heyho]

SORTED!

The following works

config rule
        option in 'lan'
        option src '192.168.0.13/32'
        option lookup '100'

config route
        option interface 'VPN'
        option target '0.0.0.0'
        option netmask '0.0.0.0'
        option metric '200'
        option table '100'

Many thanks. I have learnt a lot on the way

[heyho]

Just a little footnote (and which I suppose makes sense). I tidied all my config up including recreating the OpenVPN instance the same as the interface i.e. VPN.

This stopped the VPN working so I recreated then OpenVPN instance with another name and it was ok again.

Just posted for reference