Without using Services like PBR, setting up a VLAN for wifi AP to bypass VPN

Im attempting to create a separate VLAN that my 5ghz wifi connects to and bypasses my OpenVPN. My 2.4g will be connect through the OpenVPN as normal.

Seems simple but I keep setting stuck with bridges. Any walkthrough or help?

(This thread is attempting to do what I would like, but it was never solved.
How to make guest wifi bypass VPN with (firewall) rules / routes only? - #5 by 1weirdFish )

If you don’t want to use PBR, you can manually set routes. PBR is basically a friendlier front end for this process.

Is there a reason you don’t want to use PBR?

1 Like

Hi, PBR is throwing errors. Plus Id rather not use a service.

Have you read the README file that is linked? And/or asked questions on the forum to try to resolve those errors?

How come?

PBR isn't really a service in the sense that it is constantly running or involved in moving packets. Like the firewall "service," it runs once to set up tables in the kernel then the traffic is processed by the standard kernel code.

Yes, Ive spent the last 2 days searching and reading and making posts.

Because Ive used PFsense in the past and just made firewall/traffic rules.

I guess the point is that PBR is effectively an easier way to create the routing tables, so why would that be an undesirable method in your eyes? If you want to get closer to the metal, you can manually build your routing tables:

https://openwrt.org/docs/guide-user/network/routing/basics

I appreciate the link. Ive read through the entirety of PBR readme as well as gateway and table information.
Ive been a public school teacher for over a decade and can imagine the look on a students face when they ask me for help on a math problem and I hand them a textbook. Can you?

I need help with my unique 1 port router setup I got help with before. [Solved] 24.10.0-rc2 on a Wavlink AC1800 and DHCP/setup issues

Normal guides and info dont seem to apply, or at least Im missing something.

I mean the principle is fairly simple with PBR. There is a LuCI app for it, too... basically you'll create two policies:

  1. regular lan > egress via VPN
  2. secondary lan > egress via wan.

PBR makes this pretty easy.

You said earlier that you got errors from PBR... have you specifically asked for a review of your PBR and network configs?

EDIT: I just setup a test router with a VPN and a second lan, then added PBR. Having never read the documentation nor used the service previously, I was able to get it working as desired in about 15 minutes. I'd strongly recommend using PBR.

1 Like