Home / server / Questions / 66222
Accepted
mr-euro
Asked: 2009-09-18 04:19:43 +0800 CST

Restrict VPN client traffic to certain domains/IP

  • 772

Is there any way to restrict a VPN client to only route certain traffic via the VPN and the rest via their local gateway?

For example: traffic to a certain IP or domain gets routed across the VPN and all other requests do not.

Let me know if you need more details.

Thank you.

vpn

4 Answers

  1. I see this question tagged as openvpn, so I'Lll give an openvpn answer.

    In openvpn you can make server "push" certain routes to the clients

    openvpn server.conf

    push "route 192.168.2.0 255.255.255.0"
push "route 1.2.3.0 255.255.255.0"

    The client must have 'pull' in its config file.

    see man openvpn(8) under --pull and --push

    • 4

  2. Sure, you just add route commands to the openvpn configuration. Let me know if you need more details.

    • 0
  3. Best Answer

    It does not seem to be possible to only route traffic to a certain FQDN via the VPN. The alternative of using the IP address is not sufficient in this case as it can change. Thank you anyhow.

    • 0

  4. Could you be asking about "split-tunneling"... http://en.wikipedia.org/wiki/Split_tunneling

    ipUnplugged Mobile VPN from Radio IP Software. This is an IPSec mobile VPN based on Mobile IP standards and is always on. The user doesn't have to start/stop the VPN; it is intelligent enough to know when the user is in the office and when they are outside your secure network. www.ipunplugged.com

    • 0