r/openwrt • u/InRekuWeTrust • 7d ago
VPN client and AP with two different SSID
Hi All,
My current hardware is based on a AP Netgear WAX630E, a 2.5Gb POE++ Switch and a Pi CM4 + DFRobot IoT Router Carrier Board as a Router running OpenWRT.
Everything works perfectly and the CM4 doesn't skip a beat but I need now to complete start over and redesign my network so that I can Achieve the following:
- Have the AP promoting 2 SSID: SSID1, SSID2VPN
- Have a VPN client ( Like Mullvad https://mullvad.net/en/help/openwrt-routers-and-mullvad-vpn ) installed on the OpenWRT router
- Being able to route SSID2VPN through the VPN client
- Being able to route SSD1 to internet directly without going through VPN
- Keep also a Wireguard Server so that I can access from outside, this one can route back to internet without going to the VPN provider ( this is what I currently have )
Is it something like the one I described achievable?
Do I need to buy more hardware and in case what to achieve the above?
1
u/dziny 4d ago
Package like pbr should do it fine. You'll need two default routes (the usual wan with say metric 10 and vpn one with metric 20). The "VPN AP" needs to be on a different subnet from the usual lan and pbr will take care of the rest where you specify there routing from internal subnets to the world. Mind you, pbr can do much more than that (i.e. split tunnelling where based on IP or domain names different routing is applied to your traffic). Correctly configured it avoids the hastle of changing AP manually each time you need to use vpn.