openvpn crashes router (1900ac mamba)

[mrpink57]

So I was going to setup openvpn on my router as a server for my devices when I travel.

I setup everything just fine with allowing devices to access other devices on the lan (NAS) and all traffic.

Once I added a device which I also wanted to be added to my subnet of 192.168.2.0 the router will just hang and hang to the point it never goes through. I tried restarting the router but I was unable to access the device via the IP in my browser or over SSH.

Has anyone else run in to this issue, if so recommendations? I tried pulling any logs but since I am unable to access the device once this happens I am unable to give much there.

Version of Gargoyle I am using: 1.10.X (Built 20180324-0955 git@68ce297)

[Lantis]

Please show what settings you’re trying to use when it dies. I don’t understand what you mean about the subnet, but I expect it is the problem.

[ispyisail]

screen shots please

[mrpink57]

https://s22.postimg.cc/alb3bcmz5/openvpn.jpg

Here is a screenshot of what my potential settings were before the crash.

EDIT: Looking back my guess is because I set the ip to 192.168.2.1 which is my router IP I need to change that to whatever IP I want within my subnet?

[Lantis]

So i'm not an Openvpn expert (might want iSpy to confirm here), but i believe the idea of that setting is to create a route to the subnet behind the client.

In order to use that setting, you need to make sure that each client you want to route has a unique subnet behind it, otherwise you'll get clashes.
The worst situation as i think you've discovered is duplicating your main routers subnet.

I think if you change the subnet behind the client and then adjust that setting to match, you'll have more success.

[Lantis]

Ahh, and it looks like iSpy has already written up a great guide illustrating this point
https://www.gargoyle-router.com/wiki/do ... reversevpn

[mrpink57]

Reading now. Thanks guys!

[ispyisail]

use default setting where possible

getting the subnets right is the key

[mrpink57]

I updated my subnet and everything is working now.

I also updated the server.conf to point DNS to my Pi Hole so now while on the move we are getting FTLDNS with DOH

[ispyisail]

I also updated the server.conf to point DNS to my Pi Hole so now while on the move we are getting FTLDNS with DOH

This may not work as the setting may get over written when you hit save with your gargoyle router?

see how you go