Open VPN and NO Open VPN
-
Hi,
I am new to pfSense and I am having trouble with Media streaming on my Apple TV, mainly with BINGE(App).
My appliance has 8 ethernet ports and one is used for WAN, therefore there are 7 remaining ports.
I have Open VPN set up with ProtonVPN and it all appears to be working ok, but I really only want the VPN to run on three or four of my ethernet ports and I want the other ports to be available for either another VPN connection and or straight connection to my ISP(static IP).
I am not sure of the terminology I should be using for what I want to achieve.
Can I assign the VPN to specific ethernet ports? If so how?
Will the unassigned ports give me access to my ISP static IP?Thank you in advance.
-
@Elyot
Seems, that you want to achieve something similar than this guy: https://forum.netgate.com/topic/182441/setting-the-correct-firewall-for-docker-and-desktop-communication -
@viragomann
Thank you.
Kind of.
Firstly I am not using Docker(not sure if that changes anything).
I am using a Netgate appliance.
Basically, what I want is to be able to access the internet directly from my ISP from certain Ethernet ports, and be able to access the VPN from other, or a different Ethernet port.
I am just not sure how to set that up or what it would look like.
When I set the appliance up I was happy just having internet access via the VPN.
I could reset the appliance to the default setting, but then when I set the VPN up again is there something I should do differently to link/bind the VPN to one or more specific Ethernet ports? -
@Elyot
Why would you reset the appliance? You should be able to configure it for your needs based on what you actually have.The linked thread shows you, how to route upstream traffic to a certain gateway. This seems to be, what you need here.
When you set up a VPN, you can decide if you want to use it as default gateway or not. Most VPN providers pushes the default gateway to the client. That means, any upstream traffic is routed over the VPN.
The mentioned policy routing in the other thread gives you an option to direct traffic to another gateway than the default one. If your default gateway is the VPN you can direct certain or all incoming traffic on an interface to the WAN gateway. If your default gateway is the WAN you can direct traffic to the VPN with it.
If you don't want the VPN to be your default gateway go to the OpenVPN client settings and add a check at "Don't pull routes".