HELP: OpenVPN

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Author Message
n03l
DD-WRT Novice


Joined: 02 Mar 2015
Posts: 6

PostPosted: Mon Mar 02, 2015 11:06    Post subject: HELP: OpenVPN Reply with quote
I've been at this for some time now, but till now no luck.

Problem is that when connected through another ISP to the OpenVPN server (running on a WRT54GL with Firmware: DD-WRT v24-sp2 (11/02/09) vpn) that it's not using the correct ISP's IP.

I'm sure that it's a firewall issue, but I can not seem to get this set correct!

- Connecting to the OpenVPN server is working fine.
- I can ping (and access) the LAN IP of the OpenVPN server (10.0.0.201)
- I can not ping the gateway IP (10.0.0.1)
- I can ping all websites
- When checking the IP I get the IP of the ISP used to connect to the OpenVPN server.

Anyway. Here is the server's OpenVPN config:
Quote:
port 3001
push "route 10.0.0.0 255.255.255.0"
push "explicit-exit-notify 3"
push "dhcp-option DNS 10.0.0.1"
server 10.7.0.0 255.255.255.0
cipher BF-CBC
dev tun0
proto udp
keepalive 5 30

dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

client-to-client
persist-key
persist-tun

tun-mtu 1500
mssfix 1400

verb 5
mute 20


The client's config:
Quote:
client
dev tun
proto udp
remote XXXXXXXXXXXX.XXX
port 3001
nobind
cipher BF-CBC

persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key

verb 4
ping 60
ping restart 120


And the currently used firewall rule's
Quote:
iptables -I INPUT 1 -p udp –dport 3001 -j ACCEPT
iptables -I FORWARD 1 –source 10.0.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT


I hope that some user here can help me to get this to work.

Thank you.


Last edited by n03l on Mon Mar 02, 2015 12:56; edited 3 times in total
Sponsor
Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12675

PostPosted: Mon Mar 02, 2015 12:34    Post subject: Reply with quote
This is not the right forum for resolving this issue. Please read and follow all advice in the first post in this forum.
_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
n03l
DD-WRT Novice


Joined: 02 Mar 2015
Posts: 6

PostPosted: Mon Mar 02, 2015 12:57    Post subject: Reply with quote
Hello Murrkf,

I'm sorry about posting this in the wrong section.
I've made some small text adjustments to my 1st post, and I guess it's okay now for the General questions section. If not, please remove my post.
Murrkf
DD-WRT Guru


Joined: 22 Sep 2008
Posts: 12675

PostPosted: Mon Mar 02, 2015 15:15    Post subject: Reply with quote
It's still in the wrong section. Either Broadcom or advanced networking. Your choice. Please read the first post in this forum carefully.
_________________
SIG:
I'm trying to teach you to fish, not give you a fish. If you just want a fish, wait for a fisherman who hands them out. I'm more of a fishing instructor.
LOM: "If you show that you have not bothered to read the forum announcements or to follow the advices in them then the level of help available for you will drop substantially, also known as Murrkf's law.."
n03l
DD-WRT Novice


Joined: 02 Mar 2015
Posts: 6

PostPosted: Mon Mar 02, 2015 20:04    Post subject: Reply with quote
Understood.

Please lock or remove this thread!
I will re-post in advanced networking.

Sorry for any inconvenience caused!
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum