Can't access router admin page through vpn

[paulbates]

I can get to my cable modem's page remotely through the vpn, but not the router directly. If i rdp to an rpi, i can get to the router that way. this is not a biggie, but it would nice.

 

[Deleted member 27741]

I think I have experienced this and it may have to do with what you use to access the router... if you use the dns name it may not work on vpn (unless you have WAN access enabled for the gui and I presume you don't), you have to use the local ip address, 192.168.1.1 or whatever.

Also be aware that if you do not have the internet data routed through the gateway (yes selected for direct clients to redirect internet traffic under advanced settings) no browser data is going through the tunnel anyhow.

 

[sfx2000]

I can get to my cable modem's page remotely through the vpn, but not the router directly. If i rdp to an rpi, i can get to the router that way. this is not a biggie, but it would nice.

You have a bad route configured, and that's vaguely worrisome... because if you can access via VPN only, this suggests that the interface is now public (which means anybody with the right credentials might be able to as well).

 

[paulbates]

locally, all services work as expected..Externally, from the vpn, all lan devices and services, of which there are a dozen or so, work properly through, from remote locations, except the router config page. I do use the local nat addresses, and web, rdp, print, files services all work. Are you guys able to get to your router config from vpn, if you do that

 

[Deleted member 27741]

One second, I'll check my vpns...

Yes, I am able to access the router gui when connected by vpn (openvpn tap, openvpn tun, and pptp vpn run from the n66u) with the LOCAL IP ADDRESS OF THE ROUTER. The dns name (whatever.asuscomm.com) does not work. I do use https and I also use a port other than 443, but I do not think that matters.

Again, also be aware that if you do not have the internet data routed through the gateway (yes selected for direct clients to redirect internet traffic under advanced settings for openvpn) no browser data is going through the tunnel anyhow (and if you use port 80 or 443 for gui access it will never work).

 

[john9527]

I think by default, the router itself cannot participate in the VPN. If it did, how would it be able to connect to your ISP to get an address, DNS servers, etc.? In fact, if you are using policy based routing for your VPN and add your entire subnet, it's needed to add a 'WAN' exclusion for your router address.

 

[paulbates]

thanks guys. 000111.. I think you are right. thank you for investigating. Also, i simulated external access buy switching to my guest net. .. its on my route to the outside. i need to try this at starbucks . thanks again

 

[paulbates]

john, agreed thanks

 

[paulbates]

Follow up. It was because I was coming back in from my guest network into my own router. Works perfectly remotely


Sent from my iPhone using Tapatalk