Convert working tap to tun openvpn

[mannp]

Hi all

I have a working openvpn tap setup with merlin but want to use the iOS and android client that only use tun.

I get a connection with tun but my routing is wrong and I cannot connect to devices behind the router on my local home network.

Routing table is as follows;

Destination Gateway Genmask Flags Metric Ref Use Iface
10.10.1.2 * 255.255.255.255 UH 0 0 0 tun21
82.xx.xxx.1 * 255.255.255.255 UH 0 0 0 WAN
82.xx.xxx.0 * 255.255.255.0 U 0 0 0 WAN
192.168.1.0 * 255.255.255.0 U 0 0 0 LAN
10.10.1.0 10.10.1.2 255.255.255.0 UG 0 0 0 tun21
default 82.xx.xxx.1 0.0.0.0 UG 0 0 0 WAN

Any pointers to allow me to have access to the internal network via the vpn client would be really appreciated

Edit: To add, I can connect to LAN servers when I select redirect all traffic option in the android connect client, but I wanted to send lan only requests over the VPN and internet requests straight to the internet and not via the VPN/LAN.


Thanks
Paul.

 

[Martineau]

Hi all

I have a working openvpn tap setup with merlin but want to use the iOS and android client that only use tun.

I get a connection with tun but my routing is wrong and I cannot connect to devices behind the router on my local home network.

Routing table is as follows;

Destination Gateway Genmask Flags Metric Ref Use Iface
10.10.1.2 * 255.255.255.255 UH 0 0 0 tun21
82.xx.xxx.1 * 255.255.255.255 UH 0 0 0 WAN
82.xx.xxx.0 * 255.255.255.0 U 0 0 0 WAN
192.168.1.0 * 255.255.255.0 U 0 0 0 LAN
10.10.1.0 10.10.1.2 255.255.255.0 UG 0 0 0 tun21
default 82.xx.xxx.1 0.0.0.0 UG 0 0 0 WAN

Any pointers to allow me to have access to the internal network via the vpn client would be really appreciated

Edit: To add, I can connect to LAN servers when I select redirect all traffic option in the android connect client, but I wanted to send lan only requests over the VPN and internet requests straight to the internet and not via the VPN/LAN.


Thanks
Paul.

I have

Server 1 : TUN OpenVPN

with 'PUSH LAN to CLIENTS' checked on the advance VPN page, and my Android devices work fine to view I/P cameras remotely.

Regards,

 

[mannp]

Thanks for the reply.

Thats interesting as I have it set already;

Push LAN to clients Yes
Direct clients to redirect Internet traffic No
Respond to DNS Yes
Advertise DNS to clients Yes

Do you have any specific routing set on the android client at all?

Thanks
Paul.

 

[Martineau]

Thanks for the reply.

Thats interesting as I have it set already;

Push LAN to clients Yes
Direct clients to redirect Internet traffic No
Respond to DNS Yes
Advertise DNS to clients Yes

Do you have any specific routing set on the android client at all?

Thanks
Paul.

Temporarily enable PPTP server then ensure that a PPTP connection works....if it does then it is definitely a firewall issue.

On the server page, make sure the FIREWALL option is AUTO...sometimes it gets set to EXTERNAL which is wrong?....also check any Wintel firewall (port 445) is set to allow access from the OpenVPN client subnet if U want to share a windows folder.

The Samsung Galaxy SII uses

client
ca ca.crt

# These standard settings should match the OpenVPN server, and only the cipher needs to be checked?
ns-cert-type server
proto udp
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
cipher AES-128-CBC
comp-lzo

# Set log file verbosity.
verb 3

Regards,