option of routing all traffic through vpn or not?

B-Man

am i able to have an option to route all traffic through the vpn or only lan on the client side?

Id like to default not to route all traffic just local through vpn.

but then have the option on the client side by either 2 different client configs depending on what i want so i can route all traffic through vpn if i want
for an android device

is this doable?

what options do i need to set on the server and client to make this happen?

TinCanTech

Yes it is possible.

Two mutually exclusive[1] client configs:

1. Normal (route all traffic over the VPN)
2. Add the following:

pull-filter ignore "redirect-gateway"

Which will only send specific routed traffic over the VPN.

See --pull-filter in the manual.

[1] You cannot use them at the same time.

B-Man

i added

push "redirect-gateway def1"

to my router server config

and

pull-filter ignore "redirect-gateway"

to my #2client config

and now i dont have internet on either. i can still connect to the lan on both over mobile data but no internet access

TinCanTech

Please see:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

B-Man

tried

push "redirect-gateway local def1"

and

push "dhcp-option DNS 10.8.0.1"

already had (with my vpn subnet)

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

still cant seem to get any sort of internet. connects via local traffic fine still

TinCanTech

B-Man wrote tried

Code: Select all

push "redirect-gateway local def1"

I doubt you require local and you definitely will not want it when you go to a different location. You could use autolocal ..

B-Man wrote and

Code: Select all

push "dhcp-option DNS 10.8.0.1"

Does your server run a DNS Server ? If not use google 8.8.8.8 or who-ever you trust, opendns for example.

B-Man wrote already had (with my vpn subnet)

Code: Select all

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

still cant seem to get any sort of internet. connects via local traffic fine still

We still do not know how your server is configured .. maybe you are not using 10.8/24 .. maybe your NIC is not eth0 ..

Please see:
HOWTO: Request Help ! {2}