[raduoctavian]

Hi everyone,

I'm thinking of getting and setting up NordVPN on my Netgear R7000 router.

I do need, however, to allow most of the connected clients to use NordVPN but a few to not use it.

The thing is that connected to the router I have a TP-Link M5 Deco with a total of 3 decos in my house.

With a couple of exceptions, all the devices in my house are connected to the Deco's network over Wi-fi or cable.

I've attached a screenshot with the clients and how they look like on the router.

If NordVPN is being set up on the router then the Decos will also take over the VPN configuration, right?

My question is: how can I set up on the router a way in which a few of the devices connected to the Internet will NOT use the VPN?

Thank you!
Radu

[egc]

I am assuming the Deco's are all repeaters so that you have one subnet and all clients get their DHCP from the DDWRT router.

On the DDWRT router set DHCP start at .64 for maximum 64 clients

I am assuming the router is 192.168.1.1

In the OpenVPN PBR field enter:
192.168.1.64/26

that means everything getting its DHCP from the router is now using the the VPN other clients (which use a static lease or static IP outside 64-127) are not.

If you have static leases or IP addresses you want to use the VPN set those from .128 - 191
and add in the PBR field:
192.168.1.128/26

If you want clients not to use the VPN give those a static lease IP address below .64

It is all explained in the PBR guide.

Afterwards you have probably to deal with DNS setting.

By default all clients use the same DNS and in recent builds, when using PBR, the DNS is usually routed via the VPN tunnel.

Non VPN clients can have difficulty with this (Amazon, Netflix etc)

But that is all explained in the DNS problems guide

[raduoctavian]

[raduoctavian]

Hi again,

So I've finally got some time on my hands to read through this stuff. I've also consulted the guide I've got here https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=321686 and downloaded "DDWRT Policy Based Routing guide 1.14.pdf".

BUT - the first thing I saw was that I saw no Policy Based Routing field on my router. In other words, under Services - VPN - OpenVPN Client (Enable) I have nothing of a sort. I'm attaching a screenshot. I'm on Firmware: DD-WRT v3.0-r46949 std (06/13/21).

Am I not where I'm supposed to be?

Thanks,
Radu

[egc]

Have a close look at the pictures in the guide.
Notice the setting of the Advanced Options button

[raduoctavian]

[egc]

My first post (second of this thread) basically said it all.

Give the two clients you do not want to use the VPN a static lease outside the dhcp scope which you entered in the PBR field. https://wiki.dd-wrt.com/wiki/index.php/Static_DHCP

Every (range of) IP address you entered in the PBR field will use the VPN