No access to LAN with OpenVPN

[jorge]

Hi,

I have setup OpenVPN on my Asus Router with the latest Merlin FW.
I can connect to with my iPhone/iPad/Windows Laptop to the OpenVPN server. However, accessing resources on the local LAN does not succeed. I have gone through everything multiple times and I'm unable to find what is wrong.

My OpenVPN CONFIG
=================
# Automatically generated configuration
daemon
topology subnet
server X.Y.2.0 255.255.255.0
proto tcp-server
port 2195
dev tun21
ncp-ciphers AES-256-CBC
auth SHA512
compress lz4
keepalive 15 60
verb 3
push "route X.Y.1.0 255.255.255.0 vpn_gateway 500"
duplicate-cn
push "dhcp-option DNS X.Y.1.1"
tls-auth static.key 0
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status 5

# Custom Configuration
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
cipher AES-256-CBC
persist-tun
persist-key
client-config-dir /jffs/openvpn/ccd1
ccd-exclusive
=================

Anyone have any ideas?

Thanks
Jorge

 

[JDB]

What services are you trying to access?

Keep in mind you are using a tun connection so anything that uses broadcast/multicast messages to discover devices won’t work (you would need a tap connection for that, which is not supported on iDevices but would be on a Mac).

Have you tried a simple ping of something you know responds to ping?


Sent from my iPhone using Tapatalk

 

[jorge]

What services are you trying to access?

Keep in mind you are using a tun connection so anything that uses broadcast/multicast messages to discover devices won’t work (you would need a tap connection for that, which is not supported on iDevices but would be on a Mac).

Have you tried a simple ping of something you know responds to ping?


Sent from my iPhone using Tapatalk

I trying to access HTTP/HTTPS services
PING from my iPhone to an internal resource when having a VPN session fails

 

[ColinTaylor]

I can connect to with my iPhone/iPad/Windows Laptop to the OpenVPN server.

And you're doing this from outside your local network (mobile network, internet café, etc.)?

 

[jorge]

And you're doing this from outside your local network (mobile network, internet café, etc.)?

Yes, I'm using mobile network or another WIFI than my own WIFI. I only use my own devices

 

[jorge]

Yes, I'm using mobile network or another WIFI than my own WIFI. I only use my own devices

anyone? please

 

[azdeltawye]

anyone? please

Try the OpenVPN support forum. They should be able to help...
https://forums.openvpn.net/

 

[daviworld]

Hi,

I have setup OpenVPN on my Asus Router with the latest Merlin FW.
I can connect to with my iPhone/iPad/Windows Laptop to the OpenVPN server. However, accessing resources on the local LAN does not succeed. I have gone through everything multiple times and I'm unable to find what is wrong.

My OpenVPN CONFIG
=================
# Automatically generated configuration
daemon
topology subnet
server X.Y.2.0 255.255.255.0
proto tcp-server
port 2195
dev tun21
ncp-ciphers AES-256-CBC
auth SHA512
compress lz4
keepalive 15 60
verb 3
push "route X.Y.1.0 255.255.255.0 vpn_gateway 500"
duplicate-cn
push "dhcp-option DNS X.Y.1.1"
tls-auth static.key 0
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status 5

# Custom Configuration
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
cipher AES-256-CBC
persist-tun
persist-key
client-config-dir /jffs/openvpn/ccd1
ccd-exclusive
=================

Anyone have any ideas?

Thanks
Jorge

Hi Jorge,

Sound's like a routing issue.

You stated you can connect to your server, but can you also browse the internet on your server?

Also, best practices for troubleshooting openvpn is to build out your config small and gradually add item's till you find the culprit.

Anyway, here's a resource link to help you out.

https://superuser.com/questions/537...access-machines-on-same-lan-as-openvpn-server

Oh, almost forgot. Remove the VPN gateway from your config, and add a static route to your router.

Sent from my LG-H830 using Tapatalk

 

[martinr]

Are you trying to access the internal device by its IP address, 192.168..... or by a local hostname?

In the Advanced Server settings, that block of 4 settings beginning with Push LAN to clients, are they all set to Yes?