Client connected but not internet connexion

ehermouet

Hi all

i have ccd file for my client but they can't go to internet.
it's dd wrt routeur connected on openvpn

client can't go to internet

my ccd file
iroute 192.168.40.0 255.255.255.0
ifconfig-push 192.168.9.14 192.168.9.13

my openvpn server ip is 192.168.9.1
tks for your help

ehermouet

my server config
port 1198
proto udp
client-config-dir "C:\\ccdalizee4"
ccd-exclusive
dev tun
push "redirect-gateway def1"
ca ca-alizee4.crt
cert server-alizee4.crt
key alizee4.key # This file should be kept secret
dh dh1024-alizee4.pem
server 192.168.9.0 255.255.255.0
push "route 192.168.9.0 255.255.255.0"
push "route 192.168.40.0 255.255.255.0"
route 192.168.40.0 255.255.255.0
push "dhcp-option DNS 8.8.8.8"
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
verb 3

ehermouet

up please. nobody knows ? :cry:

Mimiko

Post config and log files from client.

ehermouet

Hi Mimiko

tks so much for your reply

server
port 1196
proto udp
client-config-dir "C:\\cxxx"
ccd-exclusive
dev tun
ca ca-xxx.crt
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
cert server-xxx.crt
key alizee2.key # This file should be kept secret
dh dh1024-xxx.pem
server 192.168.10.0 255.255.255.0
push "route 192.168.10.0 255.255.255.0"
push "route 192.168.2.0 255.255.255.0"
route 192.168.2.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nobody
persist-key
persist-tun
verb 3

ccd file
iroute 192.168.2.0 255.255.255.0
ifconfig-push 192.168.10.14 192.168.10.2

from client i don't where found log file because it's DDwrt

tks advance

Mimiko

I've asked config from client, but you showed again server's config.
In ddwrt you can use

dmesg | grep openvpn

ehermouet

yes on client i just take server, port and certificate. nothing else.

when i tape your command on "run command" ->nothing it's blank

-sh: dgmes: not found

ehermouet

i found it on TMP

client
dev tun
proto udp
remote xxxx 1196
resolv-retry infinite
nobind
persist-key
persist-tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /tmp/openvpncl/ca.crt
cert /tmp/openvpncl/client.crt
ns-cert-type server
key /tmp/openvpncl/client.key
comp-lzo

Mimiko

On dd-wrt from web pages you can cat logs.
Also on server is forwarding and masquerading enabled? http://openvpn.net/index.php/open-source/documentation/howto.html#redirect

ehermouet

yes masquerade is do and on config server you can see push redirect gateway def1.

on status web open vpn don't print logs :s

Mimiko

As this is stock openvpn from ddwrt build, please also ask on the ddwrt forums. Also where to find logs.

ehermouet

it's ok i have accès to the log file.
what information i must found ?

tks

ehermouet

i think it's my 2008 which is block internet traffic, because when i do traceroute from router it block on openvpn server ip.

C:\Users\Administrator>netstat -nr
===========================================================================
Interface List
24...00 ff de 4f 13 b8 ......TAP-Win32 Adapter V9 #5
23...00 ff ee c8 2e 4a ......TAP-Win32 Adapter V9 #4
22...00 ff 3b 54 90 d2 ......TAP-Win32 Adapter V9 #3
21...00 ff 39 e8 60 ae ......TAP-Win32 Adapter V9 #2
16...00 ff 6f 9b 5a 1b ......TAP-Win32 Adapter V9
11...00 19 99 48 cf 86 ......Broadcom NetLink (TM) Gigabit Ethernet
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
26...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
25...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
27...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4
28...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #5
29...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.255.255.1 82.xx.1x.xx7 276
10.255.255.1 255.255.255.255 10.255.255.1 82.xx.1x.xx7 21
82.xx.1x.xx7 255.255.255.255 On-link 82.xx.1x.xx7 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 192.168.10.2 192.168.10.1 30
192.168.3.0 255.255.255.0 192.168.8.2 192.168.8.1 30
192.168.5.0 255.255.255.0 192.168.5.2 192.168.5.1 30
192.168.5.0 255.255.255.252 On-link 192.168.5.1 286
192.168.5.1 255.255.255.255 On-link 192.168.5.1 286
192.168.5.3 255.255.255.255 On-link 192.168.5.1 286
192.168.6.0 255.255.255.0 192.168.6.2 192.168.6.1 30
192.168.6.0 255.255.255.252 On-link 192.168.6.1 286
192.168.6.1 255.255.255.255 On-link 192.168.6.1 286
192.168.6.3 255.255.255.255 On-link 192.168.6.1 286
192.168.7.0 255.255.255.0 192.168.5.2 192.168.5.1 30
192.168.8.0 255.255.255.0 192.168.8.2 192.168.8.1 30
192.168.8.0 255.255.255.252 On-link 192.168.8.1 286
192.168.8.1 255.255.255.255 On-link 192.168.8.1 286
192.168.8.3 255.255.255.255 On-link 192.168.8.1 286
192.168.9.0 255.255.255.0 192.168.9.2 192.168.9.1 30
192.168.9.0 255.255.255.252 On-link 192.168.9.1 286
192.168.9.1 255.255.255.255 On-link 192.168.9.1 286
192.168.9.3 255.255.255.255 On-link 192.168.9.1 286
192.168.10.0 255.255.255.0 192.168.10.2 192.168.10.1 30
192.168.10.0 255.255.255.252 On-link 192.168.10.1 286
192.168.10.1 255.255.255.255 On-link 192.168.10.1 286
192.168.10.3 255.255.255.255 On-link 192.168.10.1 286
192.168.40.0 255.255.255.0 192.168.9.2 192.168.9.1 30
192.168.100.0 255.255.255.0 192.168.6.2 192.168.6.1 30
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 82.165.194.187 276
224.0.0.0 240.0.0.0 On-link 192.168.10.1 286
224.0.0.0 240.0.0.0 On-link 192.168.8.1 286
224.0.0.0 240.0.0.0 On-link 192.168.6.1 286
224.0.0.0 240.0.0.0 On-link 192.168.9.1 286
224.0.0.0 240.0.0.0 On-link 192.168.5.1 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 82.xx.1x.xx7 276
255.255.255.255 255.255.255.255 On-link 192.168.10.1 286
255.255.255.255 255.255.255.255 On-link 192.168.8.1 286
255.255.255.255 255.255.255.255 On-link 192.168.6.1 286
255.255.255.255 255.255.255.255 On-link 192.168.9.1 286
255.255.255.255 255.255.255.255 On-link 192.168.5.1 286
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
10.255.255.1 255.255.255.255 10.255.255.1 1
===========================================================================

ehermouet

i foundddddddddddddddddddddddddddddd 😃 😃 😃 😃 😃 😃

i follow this link https://forums.openvpn.net/topic7806.html

my only pb it was sharing for all vpn connexion and not only 1.

Mimiko

It is always good to mention the systems you are using for server and client.