[SOLVED] Renting out two houses, internet connection on my name.

[swealp]

I am renting out 2 houses, and the internet connection is on my name. So i want to save my <mod edit> if the renters do some stupid thing. Thank you for advice.

I was thinking of having a router with 2 vpn protection on specific ports, what do you think?

And also bandwith limit each port.

Thank you

 

[bill001g]

I doubt a large vpn provider would go down and then what does "down" mean. You could get the case that the connection stays up but does not pass traffic. This is why routing protocols like OSPF and BGP where invented,although you can't use it in this design.

I looked but did not see menu option in merilin but the general way you accomplish this is to put in a static route with a higher metric than the first vpn. I did notice that vpn tend to put in 2 routes for 1/2 the ip blocks rather than a single default router....not sure why. You should be able to put in 2 more pointing to the other tunnel with a higher metric. The default function is when a connection goes down its route will be removed from the route table and the next higher metric will take over.

I know you can do this via the nasty edit the IPTABLES method but maybe there is a gui method.

Since it is rare for a VPN to go down it maybe simpler to just put in 2 different clients and manually switch them if something happens.

 

[swealp]

I doubt a large vpn provider would go down and then what does "down" mean. You could get the case that the connection stays up but does not pass traffic. This is why routing protocols like OSPF and BGP where invented,although you can't use it in this design.

I looked but did not see menu option in merilin but the general way you accomplish this is to put in a static route with a higher metric than the first vpn. I did notice that vpn tend to put in 2 routes for 1/2 the ip blocks rather than a single default router....not sure why. You should be able to put in 2 more pointing to the other tunnel with a higher metric. The default function is when a connection goes down its route will be removed from the route table and the next higher metric will take over.

I know you can do this via the nasty edit the IPTABLES method but maybe there is a gui method.

Since it is rare for a VPN to go down it maybe simpler to just put in 2 different clients and manually switch them if something happens.

You are awsome!
(I didnt understand everything you wrote, trying to translate.)

The problem is that i am not the one using this connection. My renters will have to talk to me everytime it goes down. That is not a good solution.

But you are right with that "what does down mean" I think i need a more advanced setup.

Asus-merlin - I talked with a coder, and they gave me a script. But the best would have been if a router firmware has this by default in the GUI.
Link: https://www.snbforums.com/threads/if-openvpn-provider-is-offline-failover-to-other-provider.55553/

Untangle seem to support this but i dont know how well it works, maybe i should ask in untangle forum for reviews:
https://wiki.untangle.com/index.php/Tunnel_VPN#Example:_Preference_Order

pfSense supports this but it is little to advanced for me i think.

EDIT:
Tomato - i forgot i asked here also, this seem to be good but tomato has not been updated for years. 🙁
Link: https://www.linksysinfo.org/index.p...mary-is-down-choose-second.74497/#post-303542

Thank you!!

 

[bill001g]

I am not sure what you have purchased but that is your other option. PFSENSE being a actual computer running linux has much more ability. You would just put in a 4 port nic card and make it into a router. You would need to add a AP if you wanted wifi. Not sure if pfsense was recommended back farther in this thread or not.

 

[hang-the-9]

Thank you for your reply!

I have another problem, do you know a solution how to make a "failover" VPN?

If #1 vpn provider is offline, use #2 vpn provider.

I looked with asus wrt-merlin but they didnt have it as default, same with dd-wrt. No answer yet from tomato people.

What should you do?

hang-the-9: I have ofcourse think about all that, this houses dont have any seperate internet connection.

Not sure what you mean by a "separate internet connection", each residence is it's own connection to the ISP, especially if they are different houses. If these houses are only used for rentals, they should have no internet service on them, until the renters move in and order it under their names and new address as new service. It would actually be better this way since new service often comes with a deal for new customers.

 

[evongugg]

PfSense supports failover and pretty much everything else you want to throw at it, except wireless. I wouldn't use the PfSense wireless function, too buggy.
If you don't like PfSense, you can use OpnSense.

 

[swealp]

OpenWRT seem to have this function:
https://forum.openwrt.org/t/failover-function-for-openvpn-if-primary-is-down-choose-second/33238

If that dont work, last alternative is pfSense that is little to advanced for me.

I will test it soon!

 

[swealp]

oh, even OpenWRT is hard. I am trying to find someone that can help me for money because this has taken over 2 weeks now.

Thank you. 🙁

 

[mdd1963]

you are providing free internet to renters?