WZR-HP-G450H OpenVPN no internet

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
View previous topic :: View next topic  
Author Message
cccy
DD-WRT Novice


Joined: 13 Jun 2012
Posts: 4
PostPosted: Wed Jun 13, 2012 18:13    Post subject: WZR-HP-G450H OpenVPN no internet Reply with quote
Hi, I have setup OpenVPN on my router, everything connects just fine, but when I attempt to access the internet, it just fails. However, I am able to ping and access the router. Anyone has any idea what is wrong with my setup?



Router specs:
Code:
WZR-HP-G450H
DD-WRT v24SP2-MULTI (03/21/12) std (SVN revision 18795)



Server config:
Code:
push "redirect-gateway def1"
server 192.168.66.0 255.255.255.0
dev tun0
proto tcp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001




Client config:
Code:
remote home.regeane.co.cc 1194
client
remote-cert-tls server
dev tun0
proto tcp
resolv-retry infinite
nobind
persist-key
persist-tun
float
redirect-gateway def1
route-delay 30
ca ca.crt
cert Laptop1.crt
key Laptop1.key




Firewall settings:
Code:
iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT




Server log:
Code:
Serverlog Clientlog 20120613 18:41:01 I OpenVPN 2.2.1 mips-linux [SSL] [LZO2] built on Mar 21 2012
20120613 18:41:01 W IMPORTANT: OpenVPN's default port number is now 1194 based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
20120613 18:41:01 W NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
20120613 18:41:01 W WARNING: file '/tmp/openvpn/key.pem' is group or others accessible
20120613 18:41:01 I TUN/TAP device tun0 opened
20120613 18:41:01 I /sbin/ifconfig tun0 192.168.66.1 pointopoint 192.168.66.2 mtu 1500
20120613 18:41:01 W WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info.
20120613 18:41:01 W WARNING: Failed running command (--route-up): external program fork failed
20120613 18:41:01 I Listening for incoming TCP connection on [undef]:1194
20120613 18:41:01 I TCPv4_SERVER link local (bound): [undef]:1194
20120613 18:41:01 I TCPv4_SERVER link remote: [undef]
20120613 18:41:01 I Initialization Sequence Completed
20120613 18:41:12 I Re-using SSL/TLS context
20120613 18:41:12 I TCP connection established with 192.168.11.57:56397
20120613 18:41:12 I TCPv4_SERVER link local: [undef]
20120613 18:41:12 I TCPv4_SERVER link remote: 192.168.11.57:56397
20120613 18:41:13 I 192.168.11.57:56397 [Laptop1] Peer Connection Initiated with 192.168.11.57:56397
20120613 18:42:18 N Laptop1/192.168.11.57:56397 Connection reset restarting [-1]
19700101 00:00:00




Client log:
Code:
Wed Jun 13 18:41:18 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Wed Jun 13 18:41:18 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Wed Jun 13 18:41:18 2012 Attempting to establish TCP connection with 210.23.18.98:1194
Wed Jun 13 18:41:18 2012 TCP connection established with 210.23.18.98:1194
Wed Jun 13 18:41:18 2012 TCPv4_CLIENT link local: [undef]
Wed Jun 13 18:41:18 2012 TCPv4_CLIENT link remote: 210.23.18.98:1194
Wed Jun 13 18:41:19 2012 [Router1] Peer Connection Initiated with 210.23.18.98:1194
Wed Jun 13 18:41:21 2012 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{23D9ED00-32E0-4271-8B26-709005DF287F}.tap
Wed Jun 13 18:41:21 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 192.168.66.6/255.255.255.252 on interface {23D9ED00-32E0-4271-8B26-709005DF287F} [DHCP-serv: 192.168.66.5, lease-time: 31536000]
Wed Jun 13 18:41:21 2012 Successful ARP Flush on interface [43] {23D9ED00-32E0-4271-8B26-709005DF287F}
Wed Jun 13 18:41:51 2012 Initialization Sequence Completed
Wed Jun 13 18:42:25 2012 SIGTERM[hard,] received, process exiting
Back to top View user's profile Send private message
Sponsor
cccy
DD-WRT Novice


Joined: 13 Jun 2012
Posts: 4
PostPosted: Thu Jun 14, 2012 7:47    Post subject: Reply with quote
Anyone can help?
Back to top View user's profile Send private message
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany
PostPosted: Thu Jun 14, 2012 15:53    Post subject: Reply with quote
upgrade 1st and use the gui
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
Back to top View user's profile Send private message
cccy
DD-WRT Novice


Joined: 13 Jun 2012
Posts: 4
PostPosted: Sat Jun 16, 2012 19:49    Post subject: Reply with quote
Hi, isn't the latest version available the version I am already using? I have checked with the Buffalo website and this version is the latest version available. Perhaps you can point me to the link of the latest upgrade? So sorry for the inconvenience caused.
Back to top View user's profile Send private message
bigsteve101
DD-WRT Novice


Joined: 15 Nov 2012
Posts: 4
PostPosted: Thu Nov 15, 2012 22:02    Post subject: Reply with quote
firewall rules try these works for me Very Happy

iptables -I input 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.11.0/24 -j ACCEPT
iptables -I FORWARD br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.108.0.0/24 -o ppp0 -j MASQUERADE
iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.11.0/24 -j MASQUERADE
iptables -i FORWARD -i tun0 -o ppp0 -s 10.108.0.0/24 -m conntrack --ctstate NEW -j ACCEPT
Back to top View user's profile Send private message
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum