Page 1 of 1
Is it possible to route all traffic through the VPN for selected user profiles?
Posted: Fri Mar 25, 2022 8:48 pm
by johnds
Hi,
Is it possible to route all traffic through the VPN for selected user profiles?
thanks
John
Re: Is it possible to route all traffic through the VPN for selected user profiles?
Posted: Fri Mar 25, 2022 8:51 pm
by johnds
On my AS:
Should client Internet traffic be routed through the VPN? set to NO
Re: Is it possible to route all traffic through the VPN for selected user profiles?
Posted: Sat Mar 26, 2022 4:28 pm
by openvpn_inc
Hello johnds,
The setting in the VPN Settings page is for all users. To set it per user or per group there is the option to do this in the command line. For example you could create a group that has the setting turned off on the command line, and after that whenever you assign a user to that group it will be using split-tunnel because it inherits the setting from that group.
The section to control redirect gateway functionality (which does the full-tunnel redirection) is in the command line documentation is here:
https://openvpn.net/vpn-server-resource ... s-settings
Disable redirection of internet traffic, and don't push DNS servers:
./sacli --user <USER_OR_GROUP> --key "prop_reroute_gw_override" --value "disable" UserPropPut
Disable redirection of internet traffic, but still push DNS servers:
./sacli --user <USER_OR_GROUP> --key "prop_reroute_gw_override" --value "dns_only" UserPropPut
All commands are assumed to be executed as root in the /usr/local/openvpn_as/scripts directory.
Kind regards,
Johan