OpenVPN No Internet Access Clients

Report wireless and/or network connectivity problems in this forum.

Moderator: Moderators

Post Reply
TBP
Posts: 7
Joined: Sun Jun 01, 2014 3:38 am
Location: Australia

OpenVPN No Internet Access Clients

Post by TBP »

I have just set up an OpenVPN server on my router running Gargoyle.
I can connect and access the router user interface but I can not access the internet.
I think it is not getting access to the DNS server from the router.
On my iPhone (3G connected) it works if I have "Google DNS fallback" checked in the OpenVPN app.
On Windows 7 machine (tethered to iPhone 3G with VPN off on iPhone) no internet when connected and network classed as "undefined" by windows.

Gargoyle Version: 1.6.2
Hardware: TP Link 1043ND ver 1

Local Network config
Router IP: 172.20.22.1
Subnet Mask: 255.255.255.0
DNS Servers: Default DNS Servers Specified by ISP
Allow NameCoin/OpenNIC Resolution: Checked
Force Clients To Use Router DNS Servers: Unchecked

Server config
OpenVPN Internal IP: 10.8.0.1
OpenVPN Internal Subnet: 255.255.255.0
OpenVPN Protocol: UDP
OpenVPN Cipher: AES-CBC 128bit
Cleint to Client Traffic: Allow Clients to communicate with each other
LAN Subnet Access: Allow Clients To Access Hosts on the LAN
Credential Re-Use: Credentials are specific to each client
Clients use VPN for: All Client Traffic

Client config
Client Internal IP: 10.8.0.3
Client connects to: Dynamic DNS
Subnet behind Client: No Subnet Defined

ispyisail
Moderator
Posts: 5185
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: OpenVPN No Internet Access Clients

Post by ispyisail »

I was having the same issue

I was going to investage but haven't got that far

TBP
Posts: 7
Joined: Sun Jun 01, 2014 3:38 am
Location: Australia

Re: OpenVPN No Internet Access Clients

Post by TBP »

ispyisail wrote:I was having the same issue
I was going to investage but haven't got that far
Let me know if you find a solution.
I noticed tonight it doesn't let me connect to a shared folder on another device as well.
I was able to get the internet working by setting the DNS servers manually.

TBP
Posts: 7
Joined: Sun Jun 01, 2014 3:38 am
Location: Australia

Re: OpenVPN No Internet Access Clients

Post by TBP »

ispyisail do you think it has anything to do with this routing?
Below is from the client log

PUSH: Received control message: 'PUSH_REPLY,topology subnet,route-gateway 10.8.0.1,redirect-gateway def1,ping 25,ping-restart 180,route 172.22.20.0 255.255.255.0 10.8.0.1,ifconfig 10.8.0.3 255.255.255.0'

My router is setup as 172.22.20.1 not 0 ?

ispyisail
Moderator
Posts: 5185
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: OpenVPN No Internet Access Clients

Post by ispyisail »

I've got two active VPN sites

With one site when connected (VPN) I loose internet connection but can connect to clients using IP address

With the other site when connected (VPN) I have a internet connection and can connect to clients using IP address

I have not investigated the problem but I suspect that it is something to do with settings

I would suggest you do a "failsafe reset" to clear all setting and start again

TBP
Posts: 7
Joined: Sun Jun 01, 2014 3:38 am
Location: Australia

Re: OpenVPN No Internet Access Clients

Post by TBP »

ispyisail do you think this from hsk in another post would work with 1.6.2 and fix my problem?
http://www.gargoyle-router.com/phpbb/vi ... 594#p26594
hsk wrote: I've solved the problem by adding these missing lines:

Code: Select all

config forwarding 'lan_vpn_forwarding'
        option src 'vpn'
        option dest 'lan'
to /etc/config/firewall manually, and restarting firewall (/etc/init.d/firewall restart).

I'm not sure if this is the cleanest solution, anyway, it works for me.
(Gargoyle 1.7.x with DIR-825 B1 fat)

I'VE TESTED:
Ping from VPN subnet to LAN subnet works. (vice versa)
FTP connect from VPN subnet(Client) to LAN subnet(Server) works.

ispyisail
Moderator
Posts: 5185
Joined: Mon Apr 06, 2009 3:15 am
Location: New Zealand

Re: OpenVPN No Internet Access Clients

Post by ispyisail »

don't know

Post Reply