I can not figure out why this is not working, can ping the local tunnel IP from both sides, but not the remote.
Can not access any services on the other router's LAN IP, from either side, nor any devices connected to either side.
The logs do not indicate to me why this is failing, nor what I am doing wrong.
If there is a way to get more detailed log output, I would love to know how.
Thank you very much for any time given to this.
Last edited by kevinds on Mon Jul 30, 2012 2:16; edited 2 times in total
The only thing I am seeing that is semi-relivant is
Inactivity timeout (--ping-restart), restarting
Not sure if it matters, here.mooo.com is a static IP address with a DNS name, uncle.mooo.com is a dynamic IP, that I have seen change up to 4 times a day, but hasn't in the last day.
show the vyatta openvpn config file content. thats what u need. everything else is crystall ball guessing _________________ Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Its not that hard to throw some buzzwords into the WIKI search
_________________
I'm NOT rude, just offer pure facts!
_________________
TP-Link (Atheros) debrick service in EU
LZO compression in DD-WRT, when it wasn't supposed to, deleted the config posted above, and re-submitted it.
It is kind of working being that it is up, but depending what I do, it simply quits,
192.168.200.1 is dd-wrt in the remote location,
I can ping it, and a computer on the other side, but if I try and browse to 192.168.200.1 in a browser, the VPN dies, pings fail to both the router and computer.
Could the compression cause this?
Edit: After leaving and coming back 10 minutes, the Info page did eventually load, but took more than 3 minutes, clicking Adminstration took 2 minutes to load and again, pings failed during.
and gimme a working ddwrt setup 4 vyatta to add to the wiki _________________ Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Its not that hard to throw some buzzwords into the WIKI search
_________________
I'm NOT rude, just offer pure facts!
_________________
TP-Link (Atheros) debrick service in EU
Helped load the dd-wrt pages in about half the time, but still painfully slow and pings drop while IE and FireFox try and get data from the router.
Pinging the far end's tunnel IP, the internal router IP, an internal host's IP, and the WAN IP.
WAN IP never drops, but the others stop.
Going to try some more testing later on.
-I hope that someone in the future who finds this will get some good infomation
I need an opinion though, when Sash asked for a working DDWRT and Vyatta config, should I post my partially working one here, or just when it is working 100%?
read: _________________ Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Its not that hard to throw some buzzwords into the WIKI search
_________________
I'm NOT rude, just offer pure facts!
_________________
TP-Link (Atheros) debrick service in EU
Searching the general internet for firmware for the WRT400n, I found this thread. Mentions a number of builds that brick this model. Bricking a remote router will not be good.
Near the end it mentions two things of value to me, 18024 works, and that my VPN problems might not be my configuration.
Quote:
the openVPN implementation is a bit shoddy for the latest firmware in the router database
Searching for 18024 in Google brings one download link, and gives infomation on several bugs. I am going to hope there are newer builds that correct them, but I am unable to find any infomation on which builds will work.
Other Downloads "The router database is the preferred source for firmwares and related files."
Because I can not find this infomation I will directly ask, What are the un-prefered ways to find builds?
Setup:
here.vpn.com Vyatta Router Internal IP 192.168.0.0/24 Tunnel IP 172.16.2.1
there.vpn.com DD-WRT Router Internal IP 192.168.100.0/24 Tunnel IP 172.16.2.2
Vyatta 6.4:
Code:
generate openvpn key /config/auth/there.vpn.com
configure
set interfaces openvpn vtun2
set interfaces openvpn vtun2 local-address 172.16.2.1
set interfaces openvpn vtun2 local-port 2000
set interfaces openvpn vtun2 mode site-to-site
set interfaces openvpn vtun2 openvpn-option --comp-lzo
set interfaces openvpn vtun2 remote-address 172.16.2.2
set interfaces openvpn vtun2 remote-host there.vpn.com
set interfaces openvpn vtun2 remote-port 2000
set interfaces openvpn vtun2 shared-secret-key-file there.vpn.com
set protocols static interface-route 192.168.100.0/24 next-hop-interface vtun2
commit
save
I had to login as root to read the /config/auth/there.vpn.com file for the key generated for the DD-WRT side.
DD-WRT WRT400n 14896:
Startup:
Code:
# Move to writable directory and create scripts
cd /tmp
ln -s /usr/sbin/openvpn /tmp/myvpn
# Config for Site-to-Site SiteA-SiteB
echo "
remote here.vpn.com 2000
proto udp
port 2000
dev tun0
comp-lzo
secret /tmp/static.key
verb 3
keepalive 15 60
daemon
" > SiteA-SiteB.conf
This works with one bug with OpenVPN for this build. Accessing the DD-WRT router using it's internal addresses 192.168.100.1 or 172.16.2.2 in this case, the VPN all but dies. Examples accessing the DD-WRT's status page, logging into DD-WRT with SSH.
Using the WAN IP to do the same has no issues.
Last edited by kevinds on Mon Jul 30, 2012 23:28; edited 2 times in total
havent read my signature... _________________ Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Its not that hard to throw some buzzwords into the WIKI search
_________________
I'm NOT rude, just offer pure facts!
_________________
TP-Link (Atheros) debrick service in EU
