Openvpn server AND client...

[Martineau]

I dont understand but look working today...?
I joined print screen ip table 111 and 112...

Hmm, perhaps it's due to the VPN provider sometimes incorrectly sending the wrong route info for the second VPN Client causing the invalid route conflicts info to be created in tables 254 and 112?

...but this does prove that it can work!

 

[Tuneboy2005]

Hello,
I am having a bit same problem. My router is connecting through PPPOE with my ISP. On that router i have a VPN server running with DynDNS (dont have a static IP from my ISP) . I can remotly connect through VPN with my android phones. Since short time i am also having a subscription to an VPN server. So when my router connects to AirVPN (subscription) wich works fine, i cant connect anymore with my android phones to my own server that is runnin on the asus router. I have read this tread and downloaded the pre made script at the beginning of this tread. My LAN pool starts at 192.168.2.2 and ends with 192.168.2.254 and my VPN port is 56547
What do i have to adjust in this script? And how to execute?
Thanks

 

[Tuneboy2005]

Nobody can help me?

regards

 

[john9527]

Nobody can help me?

regards

Are you using policy based routing for the VPN client?

 

[Tuneboy2005]

Are you using policy based routing for the VPN client?

No. Not that i am aware of. Never heard about policy based vpn. Just standard with the asus router.

 

[Zirescu]

Enable the Policy based setting under Redirect Internet Traffic on Client VPN and you should be good to go. Setup the devices that should route to the VPN and those via the WAN.

 

[john9527]

Enable the Policy based setting under Redirect Internet Traffic on Client VPN and you should be good to go. Setup the devices that should route to the VPN and those via the WAN.

Or if you want all the clients to go through the VPN after enabling policy based routing add this rule (if using the router default addresses)
All Clients, 192.168.1.0/24, 0.0.0.0, VPN

Then exclude the router
Router, 192.168.1.1, 0.0.0.0, WAN

And disable any of the scripts you may have been trying to set up. Just as a side comment, all of these scripts seem to flush all or part of the mangle table. The mangle table is used by other router functions, so this is a bad thing.

 

[Tuneboy2005]

I will first try with only 1 client to see if it works. What should i fill in in destination IP? My router is 192.168.2.1 and my Synology is 192.168.2.17. I wanna reach that server from outside.

 

[Tuneboy2005]

Hi,
I tried it for all my clients as follow: see first screenshot.
But when i have this configuration my router cannot connect anymore to my airVPN server. I get a routing confict as you see in second screenshot:

first: https://snag.gy/GTcAup.jpg
second : https://snag.gy/nOMUW4.jpg

 

[john9527]

Remove the route-delay and explicit-exit-notify options from the custom config. Then reboot the router to make sure things are cleaned up.

If that doesn't work, then also post a screenshot of your server settings.

 

[Tuneboy2005]

Ok appearantly i also forgot to give in my username and pasword for airvpn. After i did that i could connect again with airvpn.
Here are my screenshots of either my VPN client (airvpn) in screenshot 1 and my server vpn (running on asus router) in screenshot 2

screenshot 1 : https://snag.gy/tv2CKa.jpg
screenshot 2: https://snag.gy/kngV0X.jpg

Are this the right settings?

Regards

 

[john9527]

That looks like it should work, depending on what you are trying to provide with your VPN server. With those settings, clients connecting to the server will still use their non-VPN connection for internet traffic and you will have to access anything on the VPN lan by ip and not by name.

 

[Tuneboy2005]

What i want is that i can connect to the VPN server that is running on my router with my android phone from outside my home. (through DDNS).
When i AM at home a want to browse the internet through the airVPN server.
That is in short what i want I still need both server and client on router to achieve that right?

regards

 

[Zirescu]

Yes, you should be able to connect to the VPN server on the router with those setting. One thing you may want to check is that when you export the configuration from the router that it actually picked up the ddns name you specified and didn't use the WAN IP of the router. You can open the .ovpn file in a text editor to check. Will likely be the 4th line in the file that starts with remote. It should look something like:
remote myddns.name.com 56547

On a side-note you might even be able to connect via your phone while on wifi as the traffic should route out the VPN service provider and than back to the router. If it doesn't work you can try setting the NAT loopback to Meriln under the Firewall->General tab. You might need to perform a reboot.

 

[Tuneboy2005]

@John5527 What do you mean by "still using the non-vpn server"? From outside my home I have to make a VPN connection with my phone to the asus router. So i can access my server and IP camera's etc... wich is now the case and working steady.

@Zirescu I always have to use my dyndns adress ( xxx.asuscomm.com ) in my .ovpn file because i don't have a static IP from my ISP.
I dont understand the second part of your post with that NAT loopback. I find this option in the GUI but don't understand what i could reach with that

Guys could you also help me with following request. See this thread the last 2 post? I don't get an answer.

http://www.snbforums.com/threads/overclock-ac68u.18354/page-7


Thanks alot to help me. I learned a bit more now thanks to you all.

Regards

 

[john9527]

@John5527 What do you mean by "still using the non-vpn server"? From outside my home I have to make a VPN connection with my phone to the asus router. So i can access my server and IP camera's etc... wich is now the case and working steady.

In your VPN server configuration, you have 'Direct clients to redirect internet traffic' set to no. This means that accessing sites not on your lan will be routed through the provider you are using to connect your phone. If you set this to yes, then all internet access will also be routed through your home ISP.

 

[Tuneboy2005]

In your VPN server configuration, you have 'Direct clients to redirect internet traffic' set to no. This means that accessing sites not on your lan will be routed through the provider you are using to connect your phone. If you set this to yes, then all internet access will also be routed through your home ISP.

Yes but if i set it to yes then it will slow down everything i think... but thx foor the info.
Did you manage to look at my other thread? Or don't you have experiance with it? It seems that nobody wants to answer my question

regards

 

[john9527]

Yes but if i set it to yes then it will slow down everything i think... but thx foor the info.
Did you manage to look at my other thread? Or don't you have experiance with it? It seems that nobody wants to answer my question

regards

Yes, it will be slower as everything will run at the slowest speed of the link (usually the upload speed).

Also, responded to your other thread.

 

[Tuneboy2005]

Just one one question to end this. I played with the setting 'Direct clients to redirect internet traffic' set it to YES. Result is I can connect to my home VPN with no errors but i can't access any of my ip cameras or server etc...
If i set this to NO then everything is just fine like previous. So that options is not good for me?
Or do i have to reboot everytime?

Regards

 

[Zirescu]

Just one one question to end this. I played with the setting 'Direct clients to redirect internet traffic' set it to YES. Result is I can connect to my home VPN with no errors but i can't access any of my ip cameras or server etc...
If i set this to NO then everything is just fine like previous. So that options is not good for me?
Or do i have to reboot everytime?

Regards

That's odd, are you trying to access them by Name or IP? If by name, you would probably need to enable the respond to DNS as well on the server side.