openVPN working, routing not :(

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
View previous topic :: View next topic  
Author Message
Lunex
DD-WRT Novice


Joined: 06 Oct 2010
Posts: 7
PostPosted: Fri Nov 23, 2012 9:03    Post subject: openVPN working, routing not :( Reply with quote
Hi,

i have a dd-wrt linksys wrt54gl as openvpn client working.
But the routing throught the vpn seems to be working only one-way.
I've outlined the setup here:


Can anyone see the problem with routing to the private network?

thanks in advance,
Lunex

Edit:
Additional Info
Code:
root@DD-WRT:~# ip -4 a ls
1: lo: <LOOPBACK,MULTICAST,UP> mtu 16436 qdisc noqueue
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
6: vlan1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue
    inet 192.168.0.47/24 brd 192.168.0.255 scope global vlan1
7: br0: <BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc noqueue
    inet 192.168.1.1/24 brd 192.168.1.255 scope global br0
    inet 169.254.255.1/16 brd 169.254.255.255 scope global br0:0
9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1500 qdisc pfifo_fast
    inet 172.16.0.6 peer 172.16.0.5/32 scope global tun0
root@DD-WRT:~#


Code:
root@DD-WRT:~#  iptables -t nat -L -n -v
Chain PREROUTING (policy ACCEPT 4557 packets, 813K bytes)
 pkts bytes target     prot opt in     out     source               destination

    0     0 DNAT       icmp --  *      *       0.0.0.0/0            192.168.0.47
        to:192.168.1.1
    2   137 TRIGGER    0    --  *      *       0.0.0.0/0            192.168.0.47
        TRIGGER type:dnat match:0 relate:0

Chain POSTROUTING (policy ACCEPT 7 packets, 538 bytes)
 pkts bytes target     prot opt in     out     source               destination

   76  6193 SNAT       0    --  *      vlan1   0.0.0.0/0            0.0.0.0/0
        to:192.168.0.47
    0     0 RETURN     0    --  *      br0     0.0.0.0/0            0.0.0.0/0
        PKTTYPE = broadcast
    2   410 MASQUERADE  0    --  *      br0     192.168.1.0/24       192.168.1.0
/24
  600 30770 MASQUERADE  0    --  *      tun0    0.0.0.0/0            0.0.0.0/0


Chain OUTPUT (policy ACCEPT 48 packets, 4229 bytes)
 pkts bytes target     prot opt in     out     source               destination


Last edited by Lunex on Fri Nov 23, 2012 11:59; edited 1 time in total
Back to top View user's profile Send private message
Sponsor
BasCom
DD-WRT Guru


Joined: 29 Jul 2009
Posts: 1378
Location: Germany
PostPosted: Fri Nov 23, 2012 11:21    Post subject: Reply with quote
maybe just icmp blocked on 1.0 / NET ?

provide more info

routing table of both units. can 100.2 ping 1.1 ?
how about pings in transfer net ?

normally routing dont work just "one way" A Packet needs to find the way back, so if one way wouldn´t work, a packet wouldn´t find the way back,altough it knows the way forward.
_________________
RT-N66U @ Build 25697M K3.10.63
TL-WR842ND v1 @ BS-build 23919 WDS AP
TL-WR841ND @ BS-build 23919 WDS Client
TL-WR841ND @ BS-build 23919 Client Bridge ( Routed )
Back to top View user's profile Send private message
malocite
DD-WRT Novice


Joined: 22 Nov 2012
Posts: 10
PostPosted: Fri Nov 23, 2012 14:57    Post subject: Reply with quote
Hey,

That's exactly what I'm trying to do. How did you get the openvpn client to connect to the server? What setting did you use for your TLS Cipher. What firmware are you running.

My server will take connections from openvpn software client on windows but I cannot seem to get the router to connect to it. What I found (which you can read about a few items down in this forum is that openvpn is using a different cipher than the router but the cipher its using isn't an option on the router.
Back to top View user's profile Send private message
Lunex
DD-WRT Novice


Joined: 06 Oct 2010
Posts: 7
PostPosted: Fri Nov 23, 2012 15:01    Post subject: Reply with quote
Hi Malocite,

i had problems with custom openvpn parameters in client mode, too.

The solution was to create the openvpn config file via a boot command as outlined here:
http://www.dd-wrt.com/wiki/index.php/OpenVPN#GUI_Client_Mode_Custom_Parameters

greetings
Lunex
Back to top View user's profile Send private message
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17619
Location: Hesse/Germany
PostPosted: Fri Nov 23, 2012 16:30    Post subject: Reply with quote
hi,

how about disabling the NAT on the opvn client which u have enabled?
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
Back to top View user's profile Send private message
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum