Firewalla OpenVPN Split Tunneling Config not respected

Follow

Demitri

• April 10, 2021 07:19
• Edited

Hello, 

It seems that Firewalla doesn't take into account the split tunnel config in .ovpn config files. 

When importing the same profile on other devices, i.e., iOS and Windows, split tunneling works as expected. 

Goal: 

I would like for internet traffic not to go through the Client VPN Connection on Firewalla. 

Behavior: 

While I can remotely access devices over VPN, Internet traffic is still being routed to OpenVPN.

Configuration: 

client
dev tun
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 443 tcp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote ap-southeast.gw.openvpn.cloud 1194 udp
remote-cert-tls server
cipher AES-256-CBC
auth SHA256
persist-tun
nobind
verb 3
socket-flags TCP_NODELAY
route-nopull
route 10.10.1.0 255.255.255.192 # Remote site subnet 
route 10.10.2.0 255.255.255.192 # Remote site subnet
route 10.10.3.0 255.255.255.192 # Remote site subnet

What else must I change for it to work?

 

 

 

0

• 

  James Willhoite

  • April 10, 2021 15:01

  you have to change some settings via the command line inside of redis-cli. I had to have Firewalla login and apply the settings. I captured the setting incase I needed to readjust but don't want to post it here as it can cause some problems if not used properly. You'll have to submit a ticket to Firewalla to have them log in and adjust.

  0

  Comment actions Permalink
• 

  Firewalla

  • April 10, 2021 15:27

  Can you tap on VPN Client

  Tap on the "Profile"

  There is popup and you will see (i) button, tap on that

  Scroll down to outbound policy 

  Then you can manage where internet traffic goes

  0

  Comment actions Permalink
• 

  James Willhoite

  • April 10, 2021 21:18

  I did not see those settings in my config

  0

  Comment actions Permalink
• 

  Firewalla

  • April 10, 2021 23:31

  When you tap on the little (i) button, what do you see?  

  Here is what the button look like 

  

  0

  Comment actions Permalink
• 

  Demitri

  • April 11, 2021 08:17
  • Edited

  I don't see the options in your screenshot either. Is this only available to beta users?

  0

  Comment actions Permalink

Please sign in to leave a comment.