Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot route Internet traffic across normal WAN inerface. Defaults to VPN.AC

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 629 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dturburville
      last edited by

      Hi,
      Bit of background
      OpenVPN and pfSense are on latest versions.
      OpenVPN Server configured on pfSense so I can connect remotely
      OpenVPN Client configured on pfSense to third-party VPN.AC (a pretty good VPN provider IMO)

      When connected to the OpenVPN Server remotely I can get to all resources on the LAN absolutely fine. I would also like my internet traffic to route through my normal WAN connection to my ISP but no matter what I try it doesn't happen. All internet traffic (while I am connected remotely only) is going out my VPN.AC connection and halfway round the world.

      The routing table shows that the default gateway is my WAN IP but the 0.0.0.0/1 gateway goes to VPN.AC

      Things I have tried include changing default gateways on the firewall rules , changing NAT rules (the only one that works is one that NAT's across the VPN.AC connection) and
      using redirect-gateway def1 as a custom option. I havent tried setting static routes as yet.

      I have a feeling that this should be simple but I cannot get it to work for the life of me.

      Any help or suggestions would be greatly appreciated.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        You should set your vpn client to not pull routes and then route the devices you want to go to your vpn via policy routing.

        dontpullroutes.png
        dontpullroutes.png_thumb

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.