Disabling split tunneling for specific users?

[danswartz]

Sorry if this has been answered - I searched and couldn't find this answered. Anyway, I have an openvpn virtual machine installed under ESXi. I use it for access to my home LAN when away. Works just fine. My brother travels overseas a lot, and some countries block his access to sites like pandora. I've got a vpn profile created for him, but I want him to use split tunneling, but not me. The split tunneling config setting on the GUI seems to be global. I am assuming I can add the line 'redirect-gateway def1' to his bundles config, but it isn't obvious (to me anyway), where that lives. Any tips would be much appreciated!

[janjust]

The split tunneling config setting on the GUI seems to be global.

which GUI is this?

"split tunnelling" is configured by adding or removing the line

Code: Select all

redirect-gateway def1

to the client config file (anywhere is fine, really); it can also be pushed by the server to a specific client, e.g, only for your brother's certificate

[danswartz]

The split tunneling config setting on the GUI seems to be global.

which GUI is this?

"split tunnelling" is configured by adding or removing the line

Code: Select all

redirect-gateway def1

to the client config file (anywhere is fine, really); it can also be pushed by the server to a specific client, e.g, only for your brother's certificate

The GUI is the web-based one the openvpn distro supports. I am using the vmware appliance. As far as pushing to a specific client, how do I do that? e.g. I have this virtual machine appliance which seems to be based on a debian distro. So, I login to the system via ssh and... what? It isn't clear to me where this implementation puts the per-user config files. If I knew, I could add the redirect command, but where? Sorry if this is obvious to you, it isn't to me.

[janjust]

sounds like OpenVPN Access Server, which I know very little about . I'm moving this topic to the right forum.

[danswartz]

Yes, my error, sorry. It is in fact the Access Server.