What Happens When a Router VPN Disconnects?

Drake D.

3 hours ago

A router sending network traffic toward alternate routes after a VPN connection breaks

A VPN icon saying “disconnected” is only half the story. The important question is what your router does with the next packet.

Short answer: a router VPN can fail open, sending traffic through the regular internet connection, or fail closed, blocking traffic until the encrypted tunnel returns. Automatic reconnection helps restore the VPN, but it is not the same thing as a kill switch.

The two ways a router VPN can fail

Fail open: the internet keeps working

In a fail-open setup, the router falls back to your normal ISP connection when the VPN tunnel drops. The house stays online, but affected devices may expose their regular public IP address and lose the location or privacy behavior the VPN was providing.

Fail open can be reasonable when uninterrupted access matters more than maintaining the tunnel—for example, a smart-home hub or a device that must remain reachable.

Fail closed: traffic stops

In a fail-closed setup, often called a kill switch, the router blocks selected traffic if the VPN route is unavailable. Pages stop loading, but the connection does not silently move outside the tunnel.

The tradeoff is intentional: a brief outage instead of an unnoticed privacy leak.

Automatic reconnect is not a kill switch

Auto-reconnect answers, “Will the router try to restore the tunnel?” A kill switch answers, “What happens before it succeeds?” A router can have auto-reconnect enabled and still pass traffic through the ISP during the gap.

Look for both controls: persistent/automatic reconnection and a setting that explicitly blocks non-VPN traffic when the tunnel is down.

Device exceptions change the answer

Many VPN routers use policy-based routing, so different devices can follow different paths. That means the right failure behavior can be assigned by device rather than imposed on the entire home.

Device	Sensible default	Why
Work laptop	Fail closed	Avoid an unnoticed switch to the ISP route.
Streaming TV	Depends on priority	Choose location consistency or uninterrupted playback.
Game console	Often bypass VPN	Latency and service compatibility may matter more.
Smart-home hub	Often fail open or bypass	Availability may be the priority.

Test the behavior before trusting it

While connected through the router VPN, visit an IP-check site and record the displayed IP address.
From the router dashboard, stop the VPN client without disconnecting Wi-Fi.
Refresh the IP-check page and try a second website.
If nothing loads, the tested device is probably failing closed. If the IP changes to your ISP address, it is failing open.
Restart the VPN and confirm the VPN IP returns.

Repeat the test for any device group with a different routing policy. Do not assume one device proves the behavior of every route.

What to decide before setup

Which devices must never use the direct ISP route?
Which devices must stay online even if the VPN is unavailable?
Should the whole network use one VPN location, or should device groups use different routes?
Who will notice and respond if reconnection repeatedly fails?

Bottom line

When a router VPN disconnects, “the VPN reconnects automatically” is not a complete answer. Confirm whether traffic is blocked or rerouted during the gap, then set exceptions deliberately. The best policy is the one you have tested—not the one you assume is active.