Nordvpn on one ssid

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions
Author Message
Haze32
DD-WRT Novice


Joined: 25 Jul 2020
Posts: 1

PostPosted: Sat Jul 25, 2020 1:45    Post subject: Nordvpn on one ssid Reply with quote
I've seen some other threads asking this but didnt see what I needed.

I have a Netgear r8000 triband router. I setup nordvpn on its using nordvpn's guide. https://support.nordvpn.com/Connectivity/Router/1047410342/DD-WRT-setup-with-NordVPN.htm

This is working for me on lan and all 3 ssid. What I want is for the vpn to only be on 1 ssid. is this possible?
Sponsor
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 8412

PostPosted: Sat Jul 25, 2020 2:44    Post subject: Reply with quote
By default, all SSIDs are bridged (along w/ the wired ports of the switch) to the default bridge (br0). As such, there's no way to distinguish clients (for routing purposes) based on which SSID they used (or even if it was via a wired connection) to gain access to the system. And therefore you can't limit access of the OpenVPN client to a specific SSID.

The only way to do that would be to *remove* one of the SSIDs from the default bridge (or perhaps create a new virtual SSID), create a new bridge (e.g., br1), assign the SSID to that bridge, give the new bridge its own IP network (e.g., 192.168.2.0/24), and then configure PBR (policy based routing) in the OpenVPN client w/ that IP network.

IOW, you *indirectly* associate a given SSID w/ the OpenVPN network by making sure that that SSID has its own IP network, separate from any other networks, and use that in the PBR field.

Note, some ppl like to use a second "VPN router" to achieve the same results. They daisy-chain a second router to the primary router (WAN to LAN, respectively) and assign the second router a different IP network (e.g., 192.168.2.0/24). Now when you configure and connect the OpenVPN client on that second router, any clients of that router are routed over the VPN.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum