I’m trying to only route certain traffic through a vpn. My config is as follows: [code] route-nopull route 85.203.33.78 client dev tun persist-key persist-tun tls-client remote-cert-tls server cipher AES-256-CBC remote 85.203.33.90 port 1194 proto udp resolv-retry infinite redirect-gateway def1 key-direction 1 [/code] But it’s still routing all traffic through the vpn, instead of only the traffic to 85.203.33.78. I think it has to do with the fact that I only want to route the traffic to 85.203.33.78 through the vpn (85.203.33.90) which is on the same subnet, but I’m not sure how to accommodate for this. Anybody any suggestions? Thanks allot in advance

[quote=tsprenk post_id=96012 time=1606652938 user_id=52214] I’m trying to only route certain traffic through a vpn. My config is as follows: [code] route-nopull redirect-gateway def1 [/code] But it’s still routing all traffic through the vpn,[/quote]Then don't use --redirect-gateway And --route-nopull will just break your VPN. [quote=300000 post_id=96014 time=1606667758 user_id=19319] If you only want that route so just add this on client . It will do what wou like route 85.203.33.78 255.255.255.0 vpn_gateway route 0.0.0.0 192.0.0.0 net_gateway route 64.0.0.0 192.0.0.0 net_gateway route 128.0.0.0 192.0.0.0 net_gateway route 192.0.0.0 192.0.0.0 net_gateway [/quote]This is stupid advise.

[quote=300000 post_id=96034 time=1606741570 user_id=19319] you never give advice how to make it work [/quote]My first post: [quote=300000 post_id=96014 time=1606667758 user_id=19319] Then don't use --redirect-gateway [/quote]...

Only routing certain traffic through vpn

tsprenk

I’m trying to only route certain traffic through a vpn. My config is as follows:


route-nopull
route 85.203.33.78
client
dev tun
persist-key
persist-tun
tls-client
remote-cert-tls server
cipher AES-256-CBC
remote 85.203.33.90
port 1194
proto udp
resolv-retry infinite
redirect-gateway def1
key-direction 1

But it’s still routing all traffic through the vpn, instead of only the traffic to 85.203.33.78. I think it has to do with the fact that I only want to route the traffic to 85.203.33.78 through the vpn (85.203.33.90) which is on the same subnet, but I’m not sure how to accommodate for this. Anybody any suggestions? Thanks allot in advance

300000

If you only want that route so just add this on client . It will do what wou like

route 85.203.33.78 255.255.255.0 vpn_gateway
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway

TinCanTech

tsprenk wrote I’m trying to only route certain traffic through a vpn. My config is as follows:


route-nopull

redirect-gateway def1

But it’s still routing all traffic through the vpn,

Then don't use --redirect-gateway

And --route-nopull will just break your VPN.

300000 wrote If you only want that route so just add this on client . It will do what wou like

route 85.203.33.78 255.255.255.0 vpn_gateway
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway

This is stupid advise.

300000

He dont like route over vpn what ? What is stupid if you show to me to you shouldn't say that. What people ask you never answer direct .if you cant tell me how stupid advance just let person do that and they are happy if they work for them

TinCanTech

You should also use:

route 85.203.33.78
route 0.0.0.0 224.0.0.0 vpn_gateway
route 32.0.0.0 224.0.0.0 vpn_gateway
route 48.0.0.0 224.0.0.0 vpn_gateway
route 64.0.0.0 224.0.0.0 vpn_gateway
route 96.0.0.0 224.0.0.0 vpn_gateway
route 128.0.0.0 224.0.0.0 vpn_gateway
route 160.0.0.0 224.0.0.0 vpn_gateway
route 192.0.0.0 224.0.0.0 vpn_gateway
route 224.0.0.0 224.0.0.0 vpn_gateway
redirect-private def1 bypass-dhcp block-local !ipv4

Or .... you could just not use --redirect-gateway

TinCanTech

TinCanTech wrote
300000 wrote If you only want that route so just add this on client . It will do what wou like

route 85.203.33.78 255.255.255.0 vpn_gateway
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway
This is stupid advise.

300000 wrote What is stupid if you show to me to you shouldn't say that

First:

tsprenk wrote But it’s still routing all traffic through the vpn, instead of only the traffic to 85.203.33.78.

300000 wrote If you only want that route so just add this on client . It will do what wou like

route 85.203.33.78 255.255.255.0 vpn_gateway
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway

thistle break it.

Second:

300000 wrote What people ask you never answer direct .if you cant tell me how stupid advance just let person do that and they are happy if they work for them

When you make correct answers then I do not dispute you.

300000

so person who come here to ask how to make it work and have done what I wrote and happy with that work for him . no complaint or whatever but you come here say it is not good , and said it broken so if he want to profile one for him to connect at home and dont want to route all over vpn and one for him connect at public Wi-Fi so he want all network over vpn , how can it work on that situation if you advice dont use redirect-gateway ?

in cave vpn server provide multi clients connection for many difference people , some want all vpn network , some one subnet on vpn how on earth dont use redirect-gateway ?

you never give advice how to make it work and looking for job so someone can hide from you , let check back what advice you post on here how many question you answer for people and how many paid service you ask people want to solve their problem?

TinCanTech

300000 wrote you never give advice how to make it work

My first post:

300000 wrote Then don't use --redirect-gateway

...

300000

TinCanTech wrote
300000 wrote you never give advice how to make it work
My first post:
300000 wrote Then don't use --redirect-gateway
...

so you said your advice is dont use "redirect-gateway" but if he/she want to use two profile one for all over vpn and one for only subnet over vpn how can dont use can -redirect-gateway deal with that ? your advice put it on bin on that use . is it that not break vpn ? and you said my advice it stupid? what is stupid is that ? my advice can use on both situation or whatever it is still work as should do the job.

TinCanTech

300000 wrote so you said your advice is dont use "redirect-gateway" but if he/she want to use two profile one for all over vpn and one for only subnet over vpn how can dont use can -redirect-gateway deal with that ?

And your advise here:

300000 wrote If you only want that route so just add this on client . It will do what wou like

route 85.203.33.78 255.255.255.0 vpn_gateway
route 0.0.0.0 192.0.0.0 net_gateway
route 64.0.0.0 192.0.0.0 net_gateway
route 128.0.0.0 192.0.0.0 net_gateway
route 192.0.0.0 192.0.0.0 net_gateway

Is incorrect

300000 wrote your advice put it on bin on that use . is it that not break vpn ? and you said my advice it stupid? what is stupid is that ? my advice can use on both situation or whatever it is still work as should do the job.

Your advise is stupid.

300000

let person who ask it tell if it work for him or not , you only came here to make people confuse so you can offer paid service no more than that , what i answer in here is help the person make a question and make the working solution not to exchange with you on any sense, the person who ask it know who advice work for him and he dont need to paid for service any more .

Pippin

General remark, let's stick to the topic.

Topic starter was not logged in since posting.

TinCanTech

300000 wrote you only came here to make people confuse so you can offer paid service no more than that

I help with OpenVPN .. If somebody cannot do the job they are paid to do then they can pay me to do their job for them.

300000 wrote let person who ask it tell if it work for him or not

Your advise above is incorrect and will not work.

It would also make more of a mess if it worked.

300000

Pippin wrote General remark, let's stick to the topic.

Topic starter was not logged in since posting.

they only come back when it not work as he like , if everything ok now he just forget it , that is why people only come here when they have trouble .

Pippin

The question was posted yesterday... give it time.

Ciagooract49

I faced similar kind of issue last time, I am still searching for some proper solution Same issue still no fix to this FaceTime for PC