bigjay517
Dabbler
- Joined
- Jan 14, 2015
- Messages
- 14
Hello everyone!
I appreciate the guide and all of the advice everyone has been given. I seem to be stuck on the same problem that quite a few people are/were having. I am able to connect to my VPN network just fine, but I am unable to access anything on the "local" side of the VPN. I have completly wiped the jail and started from scratch to verify that I had everything correct.
Here is a small overview of the network I have.
Local Network:
Router/Gateway 192.168.1.1
OpenVPN Jail 192.168.1.246
Clients 192.168.1.X
VPN Network:
OpenVPN server 10.8.0.1
Clients 10.8.0.X
In this case I am connecting to the VPN from my Macbook, through a portable hot-spot on my phone. I connect to the VPN and I can browse the internet fine, but if I attempt to ping anything on the local network (ie. 192.168.1.1, or 192.168.1.100 etc.) I get no response. I am also unable to ping 10.8.0.1, which I think should be the address of the VPN server as seen from the VPN client.
One of the suggestions given was to add the following two lines to the client configuration, but they only manage to make the internet completely unusable on the client. I think this is because the DNS requests are being routed to 192.168.1.1, which is not accessible by the client.
Here are the configurations that I have.
server.conf
client.ovpn
sockstat -4 -l
ipfw list
ifconfig
I have restarted the jail, and well as the whole freeNAS server, but I still have the same results. I feel like there is some routing configuration that is missing. From what I can tell though, I have all of the settings correct based on the guide in the first post. Am I missing something?
I appreciate the guide and all of the advice everyone has been given. I seem to be stuck on the same problem that quite a few people are/were having. I am able to connect to my VPN network just fine, but I am unable to access anything on the "local" side of the VPN. I have completly wiped the jail and started from scratch to verify that I had everything correct.
Here is a small overview of the network I have.
Local Network:
Router/Gateway 192.168.1.1
OpenVPN Jail 192.168.1.246
Clients 192.168.1.X
VPN Network:
OpenVPN server 10.8.0.1
Clients 10.8.0.X
In this case I am connecting to the VPN from my Macbook, through a portable hot-spot on my phone. I connect to the VPN and I can browse the internet fine, but if I attempt to ping anything on the local network (ie. 192.168.1.1, or 192.168.1.100 etc.) I get no response. I am also unable to ping 10.8.0.1, which I think should be the address of the VPN server as seen from the VPN client.
One of the suggestions given was to add the following two lines to the client configuration, but they only manage to make the internet completely unusable on the client. I think this is because the DNS requests are being routed to 192.168.1.1, which is not accessible by the client.
Code:
dhcp-option DNS 192.168.1.1 redirect-gateway def1
Here are the configurations that I have.
server.conf
Code:
port 10011
proto udp
dev tun
ca /mnt/openvpn/keys/ca.crt
cert /mnt/openvpn/keys/openvpn-server.crt # Server key created previously
key /mnt/openvpn/keys/openvpn-server.key
dh /mnt/openvpn/keys/dh2048.pem # Diffie-Hellman parameters are now 2048 bits long
server 10.8.0.0 255.255.255.0 # Purple network
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0" # Yellow network
route 192.168.1.246 255.255.255.0 10.8.0.1 # Routes traffic from the Yellow network side (10.0.0.0/24)
# to the Purple network side (10.8.0.0/24)
#tls-auth /mnt/openvpn/keys/auth.key 0
#crl-verify /mnt/openvpn/keys/crl.pem
keepalive 10 120
group nobody
user nobody
comp-lzo
persist-key
persist-tun
verb 6
log-append /mnt/openvpn/server_log.logclient.ovpn
Code:
client dev tun proto udp remote myhomenetwork.com 444 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert JayMacBook.crt key JayMacBook.key #tls-auth auth.key 1 ns-cert-type server comp-lzo verb 3
sockstat -4 -l
Code:
USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS nobody openvpn 83211 5 udp4 *:10011 *:* root syslogd 77519 7 udp4 *:514 *:*
ipfw list
Code:
00100 nat 1 ip from 10.8.0.0/24 to any out via epair4b 00200 nat 1 ip from any to any in via epair4b 65535 allow ip from any to any
ifconfig
Code:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
inet 127.0.0.1 netmask 0xff000000
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair4b: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:81:94:00:0c:0b
inet 192.168.1.246 netmask 0xffffff00 broadcast 192.168.1.255
nd6 options=9<PERFORMNUD,IFDISABLED>
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
options=80000<LINKSTATE>
inet 10.8.0.1 --> 10.8.0.2 netmask 0xffffffff
nd6 options=9<PERFORMNUD,IFDISABLED>I have restarted the jail, and well as the whole freeNAS server, but I still have the same results. I feel like there is some routing configuration that is missing. From what I can tell though, I have all of the settings correct based on the guide in the first post. Am I missing something?
Last edited:
