VPN connects but refuses connections to WAN and LAN

[eddiez]

After upgrading to 384.5 my OpenVPN servers are irresponsive. Before, the connections worked fine, with access to both LAN and WAN.

- I have fully reconfigured servers, uploading new .ovpn files to my phone
- Set options to allow client <-> client
- Reflashed firmware
- Reset servers fully
- Reinstalled Android OpenVPN app and config files.
- Enabled static routes on router

It looks like the router firewall is blocking all traffic. I also have a Synology on which, through portforwarding, I created a VPN. I can reach internet but not LAN addresses, before 384.5 this was no issue.

Certificates are not the issue I think, since the connection is made.
So what am I missing here?
Asus/Lan is on 192.168.1.1
VPN range is set at default value, 10.8.0.0
DNS LAN is set at 192.168.1.11 and 1.1.1.1
DNS WAN is set at 1.1.1.1 and 8.8.8.8


I've left the keys out of the config below

client
dev tun
proto udp
remote zeijlemaker.zapto.org 1194
float
ncp-ciphers AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
cipher AES-128-CBC
comp-lzo adaptive
keepalive 15 60
auth-user-pass
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----

-----END OpenVPN Static key V1-----
</tls-crypt>
resolv-retry infinite
nobind

 

[skeal]

Is this right? The dns server is 192.168.1.11?

 

[eddiez]

Is this right? The dns server is 192.168.1.11?

Yes. Configured DNS server on Synology NAS. Has been running like this for over a year, no issues before with VPN.

Update: removed DNS on LAN but no change in the issue

 

[makkie2002]

Same issue here.

I must say I have two VPN servers running. Server 1 runs on port 1194 over udp and has no issues. Server 2 runs on port 443 over tcp and has the above mentioned issues (can not reach internet or lan).

Eddy, can you check which server number you are using ... it might be related to the server number...

I am on ac3200 router with 384.5 merlin firmware.

 

[eddiez]

Same issue here.

I must say I have two VPN servers running. Server 1 runs on port 1194 over udp and has no issues. Server 2 runs on port 443 over tcp and has the above mentioned issues (can not reach internet or lan).

Eddy, can you check which server number you are using ... it might be related to the server number...

I am on ac3200 router with 384.5 merlin firmware.

I had two running, 1 on 1194 UDP and 1 on 1194 TCP. Both had the issue. After reset back to 1 (the first), same issue.

 

[makkie2002]

Then it is a mystery and we have to wait for the next update that will hopefully fix this.