WiFi + ethernet from same router, 1 connection with VPN, one without

alacoon

Reputable
Mar 26, 2015
5
0
4,510
Hi everyone,
Was hoping to setup a system where my wifi connection is for casual browsing and Ethernet is for vpn access. However, I want this to be be done simultaneously. Is this possible? If so, how?
Thank you

Edit:
Thanks for the quick response bill001g.
I must apologise for not being explicit enough.
I do not want the router to connect to the vpn. I have software on my computer to do so.
I merely want to have two connections to my router. Then make one connect to vpn like I normally do. Only I would have another connection I can switch to without disconnecting my vpn and downloads, to browse the web. As if it was a second computer in a way.
I hope that makes sense :s
Sorry
 
Solution
Not with any standard OS. You can not have 2 interfaces in the same subnet mostly because of how IP is designed. Now if you are talking virtual machines then you can do it.

Still even if you have 2 interfaces to 2 completely different router and subnets your main problem is the vpn software and if you can solve how to do this when you have 2 networks then you can use a single interface. You really only need the ethernet interface.

The key problem you have when you run a VPN is the VPN has forced all the routing into the tunnel it has created. If you open a command window and issue ROUTE PRINT you can see how it moved the 0.0.0.0 route.

What you need to do is manipulate the routing table in the PC with the route command. If you...
Most routers have no way to tell the difference between ethernet and wireless they think it is all one big network. The VPN in most routers is extremely simplistic and does not allow a lot of fancy option. Unfortunately this all is to accommodate those people that want a magic box they click one button and it works. You add too many features and they have to actually read the manual so the manufactures remove those features.

Most commercial routers/firewalls can easily do this but likely the only cost effective option is going to be to load dd-wrt or other third party firmware on a router. There are a couple of ways to implement what you want but you will have to read the guides on the dd-wrt site to select, it is not really hard but it involves manually editing a couple of configuration files.
 

alacoon

Reputable
Mar 26, 2015
5
0
4,510
Thanks for the quick response. Please see my above edit. Cheers



 
Not with any standard OS. You can not have 2 interfaces in the same subnet mostly because of how IP is designed. Now if you are talking virtual machines then you can do it.

Still even if you have 2 interfaces to 2 completely different router and subnets your main problem is the vpn software and if you can solve how to do this when you have 2 networks then you can use a single interface. You really only need the ethernet interface.

The key problem you have when you run a VPN is the VPN has forced all the routing into the tunnel it has created. If you open a command window and issue ROUTE PRINT you can see how it moved the 0.0.0.0 route.

What you need to do is manipulate the routing table in the PC with the route command. If you just want to turn it completely on and off you can just delete and add the 0.0.0.0 route back to your router itself which will send it directly to the internet. If you want to just send some sites outside the vpn you can leave the 0.0.0.0 route alone and then add route for the site you want to directly access the internet and point those to your router.

This concept in generally is called split tunnel. Now if you are running a VPN tunnel you do not control...like one to allow user access to a company..this ability can be disabled. The VPN software we use for corporate access will immediately terminate the tunnel if you make even the slightest change to the routing as well as a couple other methods used to change the path selection.
 
Solution