How do I setup a DD-WRT VPN Guest Network?

Getting Started:

To begin VPN Guest Network you must first complete the DD-WRT Guest Network setup and connect to your preferred VPN Service Provider.

If you have followed the FlashRouter Guest Network setup guide linked above, then your Guest Network should be on the 192.168.12.0/24 subnet. All devices that connect to this Guest Network will be assigned an IP address in the range of 192.168.12.100-150. 

At the same time, all devices that connect to regular WiFi networks being broadcast on your FlashRouter, along connections to FlashRouter wired ports are on the 192.168.11.0/24 subnet and will be assigned an IP address in the range of 192.168.11.100-150. 

Please note these are default DD-WRT DHCP settings, if you have changed the DHCP assignment ranges in your router, then this guide will not work. 

Setting Up VPN Policy Routing Rules:

Now that you have completed the guest network setup and have an active VPN connection on your FlashRouter you can make a choice as to how you would like to setup your dual gateway split tunnel VPN. 

Option 1. Send all wired and regular WiFi network traffic through VPN, while sending all Guest WiFi Network traffic through your local ISP connection.

Go to the Services > VPN page, then copy and paste the following lines into the Policy Based Routing field in the OpenVPN Client section:

192.168.11.100/30
192.168.11.104/29
192.168.11.112/28
192.168.11.128/28
192.168.11.144/30
192.168.11.148/31
192.168.11.150/32

Click Apply Settings.

The lines we copied and pasted above are making it so all devices that connect automatically to the FlashRouter in the IP range from 192.168.11.100-150 will go through VPN. This range covers all wired traffic and regular WiFi network traffic. 

Option 2. Send all Guest Network traffic through VPN, while sending all wired and regular WiFi network traffic through your local ISP.

Go to the Services > VPN page, then copy and paste the following lines into the Policy Based Routing field in the OpenVPN Client section:

192.168.12.100/30
192.168.12.104/29
192.168.12.112/28
192.168.12.128/28
192.168.12.144/30
192.168.12.148/31
192.168.12.150/32

Click Apply Settings.

The lines we copied and pasted above are making it so all devices that connect automatically to the FlashRouter in the IP range from 192.168.12.100-150 will go through VPN. This range covers all WiFi Guest Network traffic. 

Troubleshooting:

- If you are having trouble joining the guest WiFi network after completing the setup, then try rebooting your router and any devices you plan to connect to the Guest Network.

- If you have changed the DHCP range on your FlashRouter then you will need to input different lines into the Policy Based Routing field.

- If you have changed the FlashRouter IP address from 192.168.11.1, or did not use the 192.168.12.0/24 subnet for your Guest WiFi network then you will need to input different lined into the Policy Based Routing field.

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk