usg commands

set interfaces openvpn vtun0 config-file /config/user-data/openvpn/my_expressvpn_usa_-_new_york_udp.ovpn

delete interfaces openvpn vtun0
configure
set protocols static table 5 interface-route 0.0.0.0/0 next-hop-interface vti64
set firewall source-validation disable
set firewall modify VPN_Gateway rule 2502 action modify
set firewall modify VPN_Gateway rule 2502 modify table 5
set firewall modify VPN_Gateway rule 2502 source address 192.168.2.0/24
set firewall modify VPN_Gateway rule 2502 protocol all
set interfaces ethernet eth1 vif 2 firewall in modify VPN_Gateway
commit ; exit

root@SecurityGateway# set protocols static table 5 interface-route 0.0.0.0/0 next-hop-interface vtun0
[edit]
root@SecurityGateway# set firewall source-validation disable
[edit]
root@SecurityGateway# set firewall modify VPN_Gateway rule 2502 action modify
[edit]
root@SecurityGateway# set firewall modify VPN_Gateway rule 2502 modify table 5
[edit]
root@SecurityGateway# set firewall modify VPN_Gateway rule 2502 source address 192.168.60.0/24
[edit]
root@SecurityGateway# set firewall modify VPN_Gateway rule 2502 protocol all
[edit]
root@SecurityGateway# set interfaces ethernet eth1 vif 60 firewall in modify VPN_Gateway

raspberry pi

add a second fixed IP address:

go to /etc/network/interfaces.d/ and add a new file “eth0-secondIP” with this content:

auto eth0:1
allow-hotplug eth0:1
iface eth0:1 inet static
    vlan-raw-device eth0
    address 192.168.1.101
    netmask 255.255.255.0
    gateway 192.168.1.1

disable the wifi interface:

go to /boot and add this line to the config.txt file:

dtoverlay=disable-wifi