Connected to OpenVPN server on RT-AC86U - no internet connection

[Fuze]

Hi,

I'm trying to set up a VPN server on my RT-AC86U, but I can't get an internet connection. Already reset my router, but with fresh setup still the same problem. I think it might be a DNS problem, but don't know for sure. I'm not able to ping either 8.8.8.8 or google.com.

OpenVPN server config

# Automatically generated configuration
daemon ovpn-server1
topology subnet
server 172.16.4.0 255.255.255.0
proto udp
port 1194
dev tun21
txqueuelen 1000
ncp-disable
cipher AES-256-GCM
auth SHA256
compress lz4-v2
keepalive 15 60
verb 3
push "route 192.168.2.0 255.255.255.0 vpn_gateway 500"
duplicate-cn
push "dhcp-option DNS 192.168.2.1"
push "redirect-gateway def1"
plugin /usr/lib/openvpn-plugin-auth-pam.so openvpn
verify-client-cert none
username-as-common-name
ca ca.crt
dh dh.pem
cert server.crt
key server.key
script-security 2
up updown.sh
down updown.sh
status-version 2
status status 5
​

Client config

client
dev tun
proto udp
remote mydns.ddns.net 1194
float
cipher AES-256-GCM
auth SHA256
compress lz4-v2
keepalive 15 60
auth-user-pass
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----
MIIETzCCAzegAwIBAgIUZkqasA3I+hbExRn1CLlGMidahoVowDQYJKoZIhvcNAQEF
....
-----END CERTIFICATE-----
</ca>
resolv-retry infinite
nobind
​

Maybe you network specialists could help to set it up correctly Thank you

 

[elorimer]

A lot going on there. But first, do you get an internet connection from the LAN through the router itself? The router is set up with a LAN address in the 192.168.1.x range, and your WAN address is a static address in the same range.

EDIT: Never mind. I completely misread the OP before the edit.

 

[Fuze]

I'm getting internet access with all my devices connected to the router. Oh of course the router LAN IP is 192.168.2.1 and the WAN IP is 192.168.1.253.

 

[bbunge]

Looks like you have a double NAT setup? Did you port forward the first router? What client are you using?

 

[Fuze]

I've deactivated NAT at the 86U and the 1194 is forwarded to the 86U. I'm using a ubuntu openvpn client.

 

[CaptainSTX]

My suggestion in order to simplify the trouble shooting is temporarily eliminate the double NAT and get the VPN server running on the router with both LAN and internet access.

Once you have that working go back to your double NAT and start working on getting the port forwards necessary working.

 

[Fuze]

But I'm not using double NAT, because it is disabled on the 86U.