Alexander / Aebian

Alexander / Aebian

Who am I?

Musician, Programmer, Linux Geek and what not.  more...

The Categories


Media Creations
My Projects
My Hardware
Some Spotify

April 18th at 10:49pm
Report an Issue
Sidebar ➠

❬ Back to Blog

Exclude specific IP from routing [Edgemax]

Want to exclude a specific IP from routing to make it accessible? e.g. if you have a modem in front of your Edgerouter with own IP and no bridge mode? Here's how


Hi guys,

Imagine a situation like this:

The modem has his own dhcp server and is only there to provide internet.
The reason for this (in my case at least) is that fibre is currently work-in-progress in my city, so the expansion takes a while until it reaches my house. Till March 2019.

So my Edgerouter is currently providing my internal infrastructure while my modem provides the eth0 wan connectivity.
In this case I had my internet first routed over vtun0 which encrypted my traffic over VPN. However I was unable to access the modem interface on sadly.

For this to get working I had to redo my firewall. You can adapt the code and fit your needs:

What this does is to route all traffic going to the subnet directly to it and not over the vtun0 interface which would only be able to transmitt to the wan.
This is because the subnet is not managed by the Edgerouter. Instead it is managed by the modem.

You can define more direct firewall routes this way. Just remember that your VPN interface e.g. vtun0 needs to have the highest priority.
This way you will ensure that traffic to the outside (WAN) will always go trough the VPN tunnel.

That's it!

Over and Out,