Can't share internet over VPN (PPTP)

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
Gabe.Bars
DD-WRT Novice


Joined: 13 Oct 2017
Posts: 2

PostPosted: Fri Oct 13, 2017 23:42    Post subject: Can't share internet over VPN (PPTP) Reply with quote
Hello everyone

I'm new to all this VPN thing and trying to make my first server with DD-WRT, but for some reason (followed the wiki and all the tutorials I could find on internet, no success...) I can only connect to my LAN, but the WAN isn't shared over the VPN.

Bellow my settings on the VPN tab:

-------------------

PPTP Server

PPTP Server: Enable

Broadcast support: Disable

MPPE Encryption: Enable

DNS1
192.168.1.1

DNS2

WINS1

WINS2

MTU
1436
(Default: 1436)

MRU
1436
(Default: 1436)

Server IP
192.168.1.2

Client IP(s)
192.168.10.180-190

Max Associated Clients
64
(Default: 64)

Authentication: Local User Management (CHAP Secrets)

--------------------

The router default gateway is 192.168.1.1 and my DHCP range is 192.168.1.100-129.

I have DDNS already set up.

Tried 8.8.8.8 on the DNS field but then I lose even the LAN connection.

I think I'm missing something really stupid here, but I'm too noob to notice.

Any input will be much appreciated.

Thanks in advance.
Sponsor
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sat Oct 14, 2017 7:27    Post subject: Reply with quote
You have to enable NAT from the VPN sub-net.

Try this in the Firewall:

iptables -t nat -I POSTROUTING -o `get_wanface` -j MASQUERADE
Gabe.Bars
DD-WRT Novice


Joined: 13 Oct 2017
Posts: 2

PostPosted: Sat Oct 14, 2017 17:54    Post subject: Reply with quote
Per Yngve Berg wrote:
You have to enable NAT from the VPN sub-net.

Try this in the Firewall:

iptables -t nat -I POSTROUTING -o `get_wanface` -j MASQUERADE


OMG!!! This made it!!!! Thank you so much!!!

Why there's no GUI information about this configuration and what exactly this does inside the router? Just to better comprehend how this stuff works and better get around in the future.

Now I'll look further about NAT. All the VPN passthroughs was already enabled. Before your reply I though this was all the necessary to everything NAT related to work.

Well, anyway, thank you very much!!
wbartram
DD-WRT Novice


Joined: 27 Oct 2017
Posts: 14

PostPosted: Fri Oct 27, 2017 14:20    Post subject: "Dialing" onto an outgoing VPN connection Reply with quote
Hi

I have an interesting similar question. I have two DD WRT routers connected via a VPN. The "HQ" my house, 10.0.1.0 is acting as a VPN server, and the remote "My Mums" 192.168.1.0 is acting as the client.

The is the case as she is behind another router (to which I have no access) and needs to initiate the VPN connection.

When I am at my mums I can access HQ no problem, say 10.0.1.14.

But when I am at HQ I can not access say 192.168.1.14.

Any suggestions please the WAN port is set up as the VPN at my mums.

THANKS in advance. William
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12909
Location: Netherlands

PostPosted: Sat Oct 28, 2017 11:44    Post subject: Reply with quote
You better start a new thread and give more information, e.g. what routers, what builds, what kind of VPN.
Read up on TAP versus TUN, read up on firewall (because that is what blocking you) Smile

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
emersonvier
DD-WRT Novice


Joined: 16 Jun 2008
Posts: 35
Location: Sao Paulo, Brazil

PostPosted: Fri Mar 09, 2018 1:27    Post subject: Reply with quote
Per Yngve Berg wrote:
You have to enable NAT from the VPN sub-net.

Try this in the Firewall:

iptables -t nat -I POSTROUTING -o `get_wanface` -j MASQUERADE


Thank you very much Per Yngve Berg
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum