Internet access outside the VPN

Jtovpn+2022

Is there a way to allow normal internet access OUTSIDE the VPN while the openvpn session is still active?

openvpn_inc

Hi jt,

The --redirect-gateway setting is not enabled by default, only pushed to clients when your server administrator wanted it. You need to talk to your VPN administrator. If it's OpenVPN Access Server "full tunnel" can be enabled or disabled per user. Likewise community openvpn(8) can do this by means of a --client-config-directory on the server side. That would surely be the best way for you.

But there are also various client-side settings to override it, yes. See for example --pull-filter in the manual.

regards, rob0

Jtovpn+2022

Follow up:

From a Remote laptop
1. I'd like to connect to the home OpenVPN server (running on an Ubuntu box sitting behind a Router which must continue as the gateway and DHCP server)
2. Be able to RDP into the other devices on the LAN at home using their 192.168.30.xx address
3. Access resource on the internet - outside of the active VPN connection

What is the right mode for the OpenVPN server - Tun or Tap?

Is a server-bridge config directive required? If so, will I have to set up a bridge on the Linux box using brctl and attach the tap0 interface?

Does anyone how sample server and client config files that I can start with to help me do the above?

Thanks in advance.

Jtovpn+2022

The section - Using routing and OpenVPN not running on the default gateway - is exactly what I was looking for (thank you Nikita!).
https://community.openvpn.net/openvpn/wiki/BridgingAndRouting?__cf_chl_jschl_tk__=lHlR22IgMi8tjE6eUaRi2P8FaXfA045NHN8qN2gNVA8-1636438348-0-gaNycGzNCD0

Given that the above wiki page was "Last modified 6 years ago", is this still the best way to implement access to the VPN LAN and the internet?