Hi

I have configured my Vigor 2925 to connect to a VPN service using Lan to Lan with an always on connection.

If the VPN is not connected on the router the internet connection falls back to the local external IP.

Is there a way to configure the router so if the VPN fails the router blocks internet access so nothing leaks outside the VPN.

Thanks.

Try setting up a Route Policy rule for the VPN tunnel and in that, set the priority to a high value (1) and make sure the "Failover To" option is unticked, that should stop that from happening.

This guide has some good information on how to configure Policy Route rules: https://www.draytek.co.uk/support/guides/kb-policy-routing-guide-v2

Unfortunately I can't get access to the support pages as my router came from Germany even though I purchased it in the UK. I emailed Draytek support about this but apparently I'm not allowed access.