adtopkek
I have a VPN setup for Yealink phones and currently 100% of all traffic goes through it when it is enabled. I can access other clients on the VPN as I need to and everything that needs to access the server uses 10.8.0.1. I am now trying to setup a backup server which is accessible at 100.##.#.##. I need the VPN to only apply to requests that use 10.8.*.* and all other requests avoid the vpn entirely (Or is it possible to only allow a single IP), the idea behind this is the main server goes down so it cannot route traffic.
Everything is using Linux or a Unix no windows.
### Enter your local IP address below
###
local 162.0.0.0
###
### DO NOT EDIT BELOW THIS LINE
###
port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.0.0
# push "route 10.8.0.0 255.255.0.0"
client-to-client
duplicate-cn
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append /var/log/openvpn.log
management localhost 7505
verb 4
remote servername.com 1194 udp
### DO NOT EDIT BELOW THIS LINE
###
client
setenv SERVER_POLL_TIMEOUT 4
nobind
dev tun
dev-type tun
remote-cert-tls server
reneg-sec 604800
sndbuf 100000
rcvbuf 100000
auth-retry nointeract
comp-lzo
verb 3
ca keys/ca.crt
cert keys/client.crt
key keys/client.key
So I need all 10.8.*.* requests to use the VPN and everything that isn't 10.8.*.* to bypass the VPN and access the internet normally. This is for if the VPN server shuts down and devices need to use the backup server.
What should I change? I have tried various failed attempts at using route-nopull and a couple other changes with no effect.
