Dear AllA lot of stuff above.. @darkman I have NordVPN setup (IPsec) on ROS just for fun and was pretty straight forward to setup based on their article -> https://support.nordvpn.com/hc/en-us/ar ... th-NordVPN, sometimes (most times) it is better to search web before asking AI. In article it is example how to setup VPN and control with address list which local IP ranges will be routed over VPN. Ofc, I did not blindly c/p these commands from article (they are for ROSv6) and I used Winbox for setup (from command path section can be found in Winbox), but I needed some example as reference how to setup IPsec, IMO this is way better than asking AI for something that you did not done before. As for "killswitch" requirement, it is just enough to disable IPsec peer and dynamic routes and nat rule will be removed.
One note aside, NordVPN is blocking DoT/DoH to AdGuard DNS (maybe to some others too).
I tried the above guide in RB5009 in ROS 7.18.2 and it was established without issues but when i try to browse from a windows PC in the internal network i getting time out . Ping and tracert is working without issues from the VPN . does it need any extra firewall or prerouting mangle rule ?
Statistics: Posted by scostopos1 — Sat Apr 05, 2025 9:36 pm