Single Client Block if VPN Drops RESOLVED

[CrashnBrn]

Hi,

I'm not sure exactly how to set this up. I currently have all of my traffic aside from 2 internal hosts going through VPN (openvpn client).

Currently when VPN drops the clients switch over to the WAN and keep going. I would like this to keep happening but I want to have a single host that will be blocked if VPN drops while the others work as they currently do.

I think the way to do this would be to add OpenVPN as a Interface and then assign a firewall rule. Am I thinking about it the correct way?

Thanks.

Edit: I was able to do this with tagging and a floating rule.