Looking to see if someone can look at my config and help me understand why my policy route is not working.
firewall { all-ping enable broadcast-ping disable ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable modify SOURCE_ROUTE { rule 10 { description "traffic for airvpn" modify { table 1 } source { address 10.69.12.0/24 } } } name WAN_IN { default-action drop description "WAN to internal" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { bridge br0 { address 10.69.13.1/24 aging 300 bridged-conntrack disable description "Local Bridge" hello-time 2 max-age 20 priority 32768 promiscuous enable stp false } ethernet eth0 { address dhcp description Internet duplex auto firewall { in { name WAN_IN } local { name WAN_LOCAL } } speed auto } ethernet eth1 { bridge-group { bridge br0 } description "Local Bridge" duplex auto speed auto } ethernet eth2 { bridge-group { bridge br0 } description "Local Bridge" duplex auto speed auto vif 1337 { address 10.69.12.1/24 description AIR_VPN firewall { in { modify SOURCE_ROUTE } } mtu 1500 } } loopback lo { } openvpn vtun0 { config-file /config/AirVPN_Canada_UDP-443.ovpn } } protocols { static { table 1 { route 0.0.0.0/0 { next-hop 10.4.0.1 { } } } } } service { dhcp-server { disabled false hostfile-update disable shared-network-name AIRVPN_DHCP { authoritative disable subnet 10.69.12.0/24 { default-router 10.69.12.1 dns-server 8.8.8.8 dns-server 4.2.2.1 lease 86400 start 10.69.12.20 { stop 10.69.12.50 } } } shared-network-name LAN_BR { authoritative enable subnet 10.69.13.0/24 { default-router 10.69.13.1 dns-server 10.69.13.1 lease 86400 start 10.69.13.38 { stop 10.69.13.243 } } } use-dnsmasq disable } dns { forwarding { cache-size 150 listen-on br0 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 5010 { description "masquerade for WAN" outbound-interface eth0 type masquerade } } ssh { port 22 protocol-version v2 } } system { host-name ubnt login { user ubnt { authentication { encrypted-password **************** plaintext-password **************** } full-name "" level admin } } ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone UTC }
I just want anything on the 10.69.12.0/24 network to head out vtun0. I followed this guide: https://help.ubnt.com/hc/en-us/articles/204952274-EdgeMAX-Policy-based-routing-source-address-based- but it is not working. Can someone help me out?