ER605 - Force all traffic through VPN not Working

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER605 - Force all traffic through VPN not Working

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER605 - Force all traffic through VPN not Working
ER605 - Force all traffic through VPN not Working
2022-07-27 14:35:44 - last edited 2023-08-22 11:36:51
Tags: #VPN
Model: ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.2.0 build 20220114

Hello everyone,

I configured the OpenVPN with ER605 running in "Stand Alone Mode" and all works fine.

When I add the entry [push "redirect-gateway def1"] into client config-file to force all traffic through VPN tunnel no site can be reached (time-out error).

 

It's a ER605 device limitation or a my wrong configuration?

 

thankyou in advance.

 

  0      
  0      
#1
Options
5 Reply
Re:ER605 - Force all traffic through VPN not Working
2022-07-28 08:00:35 - last edited 2023-08-22 11:36:35

  @LucioRib I believe it is tplink router's limitation.

 

If you want to force all data go through VPN, you can only use PPTP/L2TP VPN and need to configure policy routing.

 

Hope tplink improve their fimrware.

  0  
  0  
#2
Options
Re:ER605 - Force all traffic through VPN not Working
2022-08-31 11:46:09 - last edited 2023-08-22 11:36:35

All traffic, except those from local networks, is carried over the VPN when using Host to Everywhere configuration. If you wish to connect to Host to Everywhere using your VPN gateway, it must be properly set up.
Log into VPN | Settings and create a VPN policy for Remote site. You can assign the policy to Central Network by clicking here. You can select Subnet 0 under the Local Networks section under the Network tab. For all Internet traffic, select Use this VPN Tunnel as the default route under Remote Networks.
You can’t browse the Internet when connected to a VPN because of DNS problems as a single problem. In any case, faulty DNS settings can affect your connection to the internet once you are connected to a VPN server, preventing you from getting online. The root cause of this problem is that you must manually adjust the DNS settings.
My preferred option will be “Send all traffic over VPN connection” when I select it in System Preferences > Network > VPN > Advanced. Thus, the reason why some traffic is not treated as VPN connections is due to not enabling the option (which is default). When one surfs the Web, the IP address remains the same as your address.
How Do I Stop All Traffic Going Through Vpn?

Connecting to the Networks should be as easy as opening the door.
Select Properties from the VPN connection you set up.
Verify that the IPv4 Properties tab is selected.
You can choose advanced settings by clicking this link.
“Use default gateway on remote network” can be turned off.

  0  
  0  
#3
Options
Re:ER605 - Force all traffic through VPN not Working
2022-11-01 21:13:43 - last edited 2023-08-22 11:36:35
  0  
  0  
#4
Options
Re:ER605 - Force all traffic through VPN not Working
2023-03-14 05:30:21 - last edited 2023-08-22 11:36:35
Tips to Fix VPN Not Connecting Change your VPN server. Reboot the device (and the router). Temporarily disable firewalls/antivirus/anti-spyware. Connect using a different protocol. Reinstall & reboot. Switch networks. Disable Battery Saving/Low Power Mode. Reset your Wi-Fi network (on Wi-Fi). Regards, Rachel Gomez
  0  
  0  
#5
Options
Re:ER605 - Force all traffic through VPN not Working
2023-04-03 05:25:25 - last edited 2023-08-22 11:36:35

  @LucioRib I tested and this works to force all traffic through VPN:

Download the .ovpn configuration file from the ER605 and open in a text editor program. 

Next, add these 2 configuration lines to the .opvn file:

 

redirect-gateway def1
dhcp-option DNS 1.1.1.1

 

You can replace 1.1.1.1 with your desired DNS server (1.1.1.1 is cloudflare DNS which is fast).

 

I added those 2 lines after the first 2 lines of the .ovpn config file:

client
dev tun
redirect-gateway def1
dhcp-option DNS 1.1.1.1

 

Then after you connect with this file the connection will show the IP address of the office, you can test by going to who.is and seeing your IP.

(To get the .ovpn file from the ER605 you first create a client-to-site OpenVPN policy and then after a few minutes you can click the Export button to get the .ovpn file to modify)

  1  
  1  
#6
Options