Openevpn does not work on the second wan

Hello to all,
After installing the latest firmware, the failover works but I still have problems.
My RUT950 has:

  • two wan one main and one failover
  • a VPN connection (openvpn) with our internal network

If the main wan is active, the VPN connection is established, if I do a traceroute I see that the traffic is rotated on the right wan

If the main wan falls, it activates the wan 2, I see the transaction on the failover , I see the main down and wan2 up but the VPN does not set up , if I do a traceroute I see that the router continues to route on the internet connection of the main wan

To be more clear I can send log screenshots etc.
Can you please help me? It’s a very worrying problem
Thank you very much

One thing I noticed is this in the route, when it’s active the main wan find:

default 172.200.0.1 128.0.0.0 UG 0 0 0 tun_c_VPN_CRI
default 10.200.88.254 0.0.0.0 UG 1 0 0 eth1
default 192.168.200.254 0.0.0.0 UG 2 0 0 eth0.2

after failover or when it passes on wan 2 I find

default 172.200.0.1 128.0.0.0 UG 0 0 0 tun_c_VPN_CRI
default 10.200.88.254 0.0.0.0 UG 1 0 0 eth1
default 192.168.200.254 0.0.0.0 UG 2 0 0 eth0.2

therefore there is no switch between the wan (eth1) and the wan 2 eth0.2 so it never connects to the public ip of the openvpn server since it always tests on the wan (eth1 that is down)
Finally if I disable the wan (eth1) here I get

Destination Gateway Genmask Flags Metric Ref Use Iface
default 172.200.0.1 128.0.0.0 UG 0 0 0 tun_c_VPN_CRI
default 192.168.200.254 0.0.0.0 UG 2 0 0 eth0.2
and the vpn on eth0.2 wan 2 is working great

What can it be?

Dear support,
we have 13 riuters with this situation , we are without a backup connection, do you have any suggestion to fix this trouble?
Thank you

Hello,
Thank you for reaching out.

I have created a guide going through all the steps needed to configure VPN traffic split that is also have enabled WAN failover.

Let us know if this guide helps
VPN split with failover.zip (373.7 KB)

Kind regards,
Arnoldas.

This topic was automatically closed after 15 days. New replies are no longer allowed.