I have established a VPN-tunnel (OpenVPN tun) to our summer house for LAN to LAN communication (two subnets). A static route is needed in the routers in both ends for the router to understand how to route traffic to the other subnet. I have identified two issues that I am convinced are bugs in the R6220 firmware.
Issue 1:
The static route is ignored after reboot or WAN interface restart (e.g. disconnect/connect the WAN cable). The static route can easilly be activated again by edit/save of the static route.
Traceroute before and after restart can be used to verify this issue.
Outgoing routing is working fine but response to incoming traffic is not routed back. You would expect the router to redirect the traffic in accordance with the static route (or in worst case route it to the VPN-tunnel). This issue is verified by Wireshark. Worth mentioning is that the issue is resolved by replacing the router by another brand.
My personal advise is to select another router if you need static routes.
Model: R6220|AC1200 Smart WiFi Router with External Antennas
> Outgoing routing is working fine but response to incoming traffic is > not routed back. You would expect the router to redirect the traffic in > accordance with the static route (or in worst case route it to the > VPN-tunnel). [...]
I would? Every static route I've ever seen has a destination, not a source. It's a one-way instruction. I'd expect routing in the other direction to be the responsibility of the fellow at the other end.
Of course, with my weak psychic powers, I can't see any of your addresses or routes, so what do I know?
> My personal advise is to select another router if you need static > routes.
Might be good advice. Your "Issue 1" suggests that. I don't know what "Issue 2" is supposed to tell me.
> Outgoing routing is working fine but response to incoming traffic is > not routed back. You would expect the router to redirect the traffic in > accordance with the static route (or in worst case route it to the > VPN-tunnel). [...]
I would? Every static route I've ever seen has a destination, not a source. It's a one-way instruction. I'd expect routing in the other direction to be the responsibility of the fellow at the other end.
Of course, with my weak psychic powers, I can't see any of your addresses or routes, so what do I know?
> My personal advise is to select another router if you need static > routes.
Might be good advice. Your "Issue 1" suggests that. I don't know what "Issue 2" is supposed to tell me.
The other end is behaving as expected. The response to incomming traffic need the static route for the response to find its way back. The router is responsible for a redirect or routing based on the configured static route. Wireshark tells me that the response are sent to the routers MAC address but no redirect is sent from the router nor is the packet routed to the VPN-tunnel.
