DD-WRT - How do I exclude hosts / bypass VPN tunnel?

WireGuard

1. Go to SETUP / TUNNELS

2. Set Advanced settings: Enable

3. Set Policy Based Routing: Enter the IP address list in a CIDR notation.

OpenVPN

1. Go to ADMINISTRATION / COMMANDS / COMMAND SHELL. Enter the following commands whilst substituting the IPs you wish to bypass the VPN (each IP separated by a space character):

   nvram set no_vpn_lst="192.168.1.5 192.168.1.6 192.168.1.7"
   nvram commit
   

2. Copy the script from below into the COMMAND SHELL and click on Save Custom Script

   #!/bin/sh
   sleep 30
   NO_VPN_LST=`nvram get no_vpn_lst`
   [ -z "$NO_VPN_LST" ] && exit 0
   WAN_GWAY="0.0.0.0"
   while [ $WAN_GWAY == "0.0.0.0" ]; do
   sleep 3
   WAN_GWAY=`nvram get wan_gateway`
   done
   ip route add default via $WAN_GWAY table 10
   for ipa in $NO_VPN_LST; do
   ip rule add from $ipa table 10
   done
   ip route flush cache
   exit 0
   

3. Reboot. Now the devices with the IPs on your list will be routed outside the OpenVPN tunnel.

Related Articles

• How to enable a 'Kill switch' in my DD-WRT/Tomato router?
• DD-WRT - TLS errors - incoming plaintext read error etc.
• OpenWrt - OBFS3 and OBFS4 Obfuscation with Obfsproxy and OpenVPN
• OpenWrt - TunnelVision Mitigation (CVE-2024-3661)