FOR TIPS, gUIDES & TUTORIALS

Question

Hi

I have openvpn set up with NORDVPN using ovpn config file.

I want to route three or four single ip addresses away from the vpn and through the normal isp route.

Can I do this via the ovpn file and how?

Or can I do it another way?

Hardware rutx09 on latest firmware

AndzejJ · Answer 1 · 2023-01-15T16:59:14+0000

Hi,

I have not tested this with NORDVPN, however, you should be able to configure VPN policy routing to achieve what you want.

For this, you will need to install VPN policy routing package via CLI/SSH:

opkg update
opkg install vpn-policy-routing

Then, you will need to find out the name of your OVPN interface via 'ifconfig' command.

The following should be your configuration using UCI, just replace IP addresses, names (if needed), and the name of the OVPN tunnel with your own. The first two rules show which IP addresses should be routed via ISP, the last rule defines the network (all the rest of the traffic from LAN) to be routed via OVPN tunnel. Add as many rules as you need, just make sure that the rule that routes via OVPN interface is the last rule at the bottom. I've added some comments, you can ignore them.

# enable vpn policy routing.

uci set vpn-policy-routing.config.enabled="1"

# delete existing rules.

while uci -q delete [email protected][0]; do :; done

# create new policy.

uci add vpn-policy-routing policy

# define a host to route via WAN or Mobile interface (whichever you use).

uci set [email protected][-1].name="HostRouteISP"
uci set [email protected][-1].src_addr="192.168.1.10/32"
uci set [email protected][-1].interface="wan"

# create a second policy.

uci add vpn-policy-routing policy

# define a second host to route via WAN.

uci set [email protected][-1].name="AnotherHostToISP"
uci set [email protected][-1].src_addr="192.168.1.11/32"
uci set [email protected][-1].interface="wan"

# Create the last policy to route the rest of the traffic via OVPN tunnel.

uci add vpn-policy-routing policy
uci set [email protected][-1].name="AllRest_OVPN"
uci set [email protected][-1].src_addr="192.168.1.0/24"
uci set [email protected][-1].interface="ovpn_tun"

# Commit changes and restart the service.

uci commit
/etc/init.d/vpn-policy-routing restart

You can use 'uci show vpn-policy-routing' to see your current vpn-policy-routing configuration.

You can find some more information in this thread.

Please, let me know your topology (with interfaces and IP addresses) if you run into any issues.

Kind Regards,

Andzej

Hi,

I have sent you a private message.

You can set the interface to 'ignore'. The traffic from the host with interface set as 'ignore' will be routed via ISP. Try :

uci set [email protected][-1].interface="ignore"

Change the policy number [-1] with the index of your policy.

You can find the policy index by executing:

uci show vpn-policy-routing

Alternatively, just delete all existing policies and create new ones from scratch.

Kind Regards,

Andzej — AndzejJ, Jan 16

FOR TIPS, gUIDES & TUTORIALS

Most popular tags

How do I route a few ip addresses through isp not vpn

Please log in or register to add a comment.

Please log in or register to answer this question.

1 Answer

Please log in or register to add a comment.