OpenVPN: NAS only accessible at 10.8.0.1 in stead of 192.168.1.X ip

[sceppi]

Hi,

I'm running OpenVPN on my synology NAS.
I can succesfully make an OpenVPN connection through IP 10.8.0.0.
In my home network my NAS is configured at 192.168.1.10

When I connect via VPN, I can only access my NAS at 10.8.0.1
How can I change this so my NAS is also accessible through its normal internal IP address 192.168.1.10?

I've read many thing about adding new (static) routes or redirect gateway, but so far unsuccesful.

In my .ovpn file I have following lines included:
redirect-gateway def1
dhcp-option 192.168.1.1 (IP of my router)

Thanks

[TinCanTech]

Please see:
HOWTO: Request Help ! {2}

Also,

• NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN

• You are advised to change your server LAN to a more unique RFC1918 compliant subnet.
  For example: 192.168.143.0/24

Also, ensure IP forwarding is enabled on your server.

[Pippin]

He forgot to mention that access to the rest of the 192.168.1.0/24 is working, just not 192.18.1.10

[TinCanTech]

He forgot to mention that ..

How do you know that ?

[Pippin]

Synology forum:
https://forum.synology.com/enu/viewtopi ... 5&t=133145

[TinCanTech]

Sounds like firewall on the NAS ..

[sceppi]

I indeed posted this on the synology forum as well... but so far I don't have an answer.
I'm indeed able to access all my other devices on the 192.168.1.x network
I've changed my LAN IP subnet from 192.168.1.X to another uncommon subnet IP range, but that doesn't help. There are no conflicts in the network.
There is also no firewall configured on my NAS.

Any info that I can post which can be of any help?
Below is my .ovpn config:

View Originalovpn config

dev tun
tls-client

remote MY_EXTERNAL_IP 1194

redirect-gateway def1
dhcp-option 192.168.1.1

pull

proto udp

script-security 2

comp-lzo

reneg-sec 0

cipher BF-CBC

auth SHA1

auth-user-pass
<ca>

[TinCanTech]

Can you ping the server on it's ethernet IP from the client ?

[sceppi]

Note: I've now changed my subnet to 192.168.2.0

I can ping my router at 192.168.2.1 (+ any other device on the network except the NAS)
reply from 192.168.2.1: byte=32 time=39ms TTL=63

I cannot ping my NAS at 192.168.2.10:
Request timed out

I can ping my NAS at 10.8.0.1:
reply from 10.8.0.1: byte=32 time=48ms TTL=64

[TinCanTech]

Post your server and client logs at --verb 4

See this

Please see:
HOWTO: Request Help ! {2}