RT-N66U OpenVPN - cannot connect to local LAN?

[striders]

I have previously setup OpenVPN AS server (download straight from OpenVPN.net). Works well with the RT-N66U and I can connect from Android, Windows and Mac machines AND browse the local LAN.

I disabled the OpenVPN AS server and tried to use RT-N66U OpenVPN. Although I can connect to the ASUS OpenVPN server, I cannot browse the local LAN.

Is there anything I need to change in the ASUS OpenVPN configuration to make this work? Below is my setting:

Interface Type: TUN --> No TAP, since Android does not support this
Protocol : UDP
Server Port: Default
Firewall : Auto
Authorization Mode: TLS
Username / Password Auth. Only: NO
Extra HMAC authorization: Disable
VPN Subnet / Netmask: DEFAULT of 10.8.0.0 —> Note that this is different than my LAN IP. I cannot change it to have the same subnet as my LAN since the router will complain about “conflict”

Poll Interval : 0 minutes (disable)
Push LAN to clients: Yes
Direct clients to redirect Internet traffic: No
Respond to DNS: No
Compression : Adaptive
Manage Client-Specific Options: Yes
Allow Client <-> Client: Yes
Allow only specified clients: No

 

[sinshiva]

USB App > Server Center > Samba

enable 'force as master browser' and 'set as WINNS server'

 

[rodak]

Can you access your Lan by typing in ip addresses of the machines? I think that you cannot browse your Lan using tun, You need to know the ip of your equipment. But I'm still learning so someone else has to confirm

Sent from my LG-D802 using Tapatalk

 

[striders]

USB App > Server Center > Samba

enable 'force as master browser' and 'set as WINNS server'

Err, I don't have a USB drive connected to the router. What I want is access other machines in my LAN, like my Windows box via NetBIOS. This is something I can do locally, but not on the VPN.

 

[striders]

Can you access your Lan by typing in ip addresses of the machines? I think that you cannot browse your Lan using tun, You need to know the ip of your equipment. But I'm still learning so someone else has to confirm

Sent from my LG-D802 using Tapatalk

No, won't work.

I am just curious what is it with the ASUS implementation of OpenVPN such that TUN will NOT allow remote devices to connect to the LAN and I have to use TAP.

With a true OpenVPN AS server I have, I can connect to the LAN with no problem. All my Android device, with OpenVPN client, can connect just fine and the OpenVPN AS server is on TUN.

So it has to do with ASUS's OpenVPN, but I couldn't figure it out.

 

[rodak]

I'm using TUN, and can access my whole Lan from outside. I'm using the ip addresses, don't think I can use host names but I've actually never tried. So something must be wrong with your setup, works brilliant over here.

Edit: I just followed a guide so I'm far from being an expert. So can't help you resolving this issue. Only thing that come to my mind was about trying with ip.
Good luck, don't give up, this should work

Sent from my LG-D802 using Tapatalk

 

[striders]

I'm using TUN, and can access my whole Lan from outside. I'm using the ip addresses, don't think I can use host names but I've actually never tried. So something must be wrong with your setup, works brilliant over here.

Sent from my LG-D802 using Tapatalk

Could you kindly take a look at my setup in the 1st post above? That's all I have right now.

I thought it's because the VPN IP address given to the client device is set to a different subnet than what I have for my LAN, but I can't even change the VPN subnet. I get:

Conflict with router's DHCP IP pool xxx.xxx.xxx

 

[rodak]

I also have a different subnet (same as yours) and it works.

Sent from my LG-D802 using Tapatalk

 

[rodak]

Here is my setup, using tun and tcp if that matters.

Sent from my LG-D802 using Tapatalk

 

[striders]

I also have a different subnet (same as yours) and it works.

Sent from my LG-D802 using Tapatalk

OK, rebooted the router.

I just tested connecting from a Mac (with TunnelBlick) to the OpenVPN server, then map the network (i.e. smb://192.168.1.xxx) and now it works.

HOWEVER, Android won't work. Have you tried connecting from Android?

 

[rodak]

Maybe some settings on your Android profile that mismatch?

Edit: sorry about triple post, should have edited my post.

Sent from my LG-D802 using Tapatalk

 

[rodak]

Yes, it works from my Android to

Sent from my LG-D802 using Tapatalk

 

[striders]

Maybe some settings on your Android profile that mismatch?

Edit: sorry about triple post, should have edited my post.

Sent from my LG-D802 using Tapatalk

Nothing is manually configured for the Android profile. This is what I did, which work with OpenVPN AS server (not ASUS's) but now for the ASUS OpenVPN:

1). Download and install Android OpenVPN from Google Play

2). From ASUS router, "Export" the configuration to a file --> file.ovpn

3). Open Android OpenVPN and import the configuration file

4). Connect from Android.

No custom manual configuration needed.

Did the same step with the *.ovpn file from OpenVPN AS server, works.

Oh, can you connect to the local LAN to the ASUS OpenVPN from your LG phone? I.e. using ES Explorer (or whatever file explorer you use), connect to your desktop/laptop drive or folder.

 

[rodak]

.

Oh, can you connect to the local LAN to the ASUS OpenVPN from your LG phone? I.e. using ES Explorer (or whatever file explorer you use), connect to your desktop/laptop drive or folder.

Yes, see screenshot above, connected to my set-top box samba share with solid Explorer, can connect to all my equipment, rpi, boxee, all routers, just everything. Like I was connected to my local Lan.


Sent from my LG-D802 using Tapatalk

 

[sinshiva]

Err, I don't have a USB drive connected to the router. What I want is access other machines in my LAN, like my Windows box via NetBIOS. This is something I can do locally, but not on the VPN.

i didn't say anything about connecting a drive

 

[striders]

Yes, see screenshot above, connected to my set-top box samba share with solid Explorer, can connect to all my equipment, rpi, boxee, all routers, just everything. Like I was connected to my local Lan.


Sent from my LG-D802 using Tapatalk

Sorry, missed that screenshot while I was replying to your post.

But I figured out the problem: Windows Firewall will NOT allow access connection from ASUS VPN-ed device. The moment I turned off Windows Firewall, I can ping, connect to local hard drive, etc.

I have enabled File and Printer sharing and allow port 445 for years (that's why connecting from OpenVPN AS works), so not sure what is Windows Firewall seeing or what changed with ASUS OpenVPN implementation.

I am falling back to the OpenVPN AS implementation for now, since I don't want to disable Windows Firewall just for this.