Problem showing desired Public IP on client

sumocomputers

I am a bit of noob, so please go easy.

I am running PiVPN (OpenVPN server 2.4.7) & PiHole on a Raspberry Pi, with a fairly vanilla install for both. I can connect to the VPN remotely and PiHole works great for DNS, so things are working for the most part.

My goal is to have 2 client profiles:

1. Which allows me to access my LAN, but does not route my internet traffic over the VPN, and use a public DNS server (9.9.9.9)
2. Which allows me to access my LAN, but route my internet traffic over the VPN and use my PiHole DNS server (192.168.2.14)

My Client Profiles are below, and the problem is that with both profiles, my apparent public IP is always that of my home IP WAN address.

This is fine for the Client Profile 2, but I really want Client Profile 1 to show the public address of the device being used to connect (phone carrier LTE for example).

On a side note, I also have OpenVPN running on a Synology NAS and I used similar client profile entries, and works the way I expect, so I'm just not sure where to look next.

For clients, I am using both OpenVPN on iOS & Tunnelblick on Mac.

Thanks,

Chris

client
dev tun
proto udp
remote myserver.ip.com 1194
route 192.168.2.0 255.255.255.0
dhcp-option DNS 9.9.9.9
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name myraspberrypiname name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
Rest Removed

client
dev tun
proto udp
remote myserver.ip.com 1194
redirect-gateway def1
dhcp-option DNS 192.168.2.14
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name myraspberrypiname name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
Rest is Removed

TinCanTech

Read the HOWTO about --redirect-gateway.

sumocomputers

TinCanTech wrote Read the HOWTO about --redirect-gateway.

Thanks for the direction. I wasn't able to find that documentation, but did find ignore --redirect-gateway here:

https://community.openvpn.net/openvpn/wiki/IgnoreRedirectGateway

For anyone else who might find this thread, I was able to finally able to edit the server config using this command:

sudo pico /etc/openvpn/server.conf

I just commented out several things, and then add them as needed on the client side.

This worked well for me since I actually wanted a few different profile choices for single client, which I can decide at connect time.