Heya, I have a working setup that tunnels WAN-IP's for certain groups (created based on the excellent how-to from this forums: https://forums.openvpn.net/topic8559.html ). Now, this setup tunnels all traffic for our people through the VPN. While this of course works, it's not entirely what I require. Instead of: [code]push "redirect-gateway def1"[/code] is there an alternative that allows me to only route specific ranges over the VPN for IP-ranges (f.e.: 123.123.123.10-123.123.123.40 - all routed through vpn), all others will be using the standard connection of the client (so that in fact, his/her google-searches don't go over the vpn, thus reducing the traffic on it)?

Redirect-Gateway for certain IP-range only

lucorlis

Heya,

I have a working setup that tunnels WAN-IP's for certain groups (created based on the excellent how-to from this forums: https://forums.openvpn.net/topic8559.html ).

Now, this setup tunnels all traffic for our people through the VPN. While this of course works, it's not entirely what I require. Instead of:

push "redirect-gateway def1"

is there an alternative that allows me to only route specific ranges over the VPN for IP-ranges (f.e.: 123.123.123.10-123.123.123.40 - all routed through vpn), all others will be using the standard connection of the client (so that in fact, his/her google-searches don't go over the vpn, thus reducing the traffic on it)?

Mimiko

Use 'push "route IP 255.255.255.255 vpn_gateway"' in the server's config file for every ip you want to route thru the tunnel. Or if IPs are under a common mask, you can use it as well.

lucorlis

That sounds easy enough that I really should have found this myself.

Thanks alot, Mimiko.