DD-WRT OpenvpnServer +Android Openvpn client Internet Access

dd-droid

Hi,

I try to setup an Openvpn server on my D-Link N600 DIR-825 with DD-WRT v24-Sp2 (build 20675)
I used the dd-wrt wiki which is sadly not up to date. i even din't find a solution in google search,....

The server is running an i can connect with my android phone ( Openvpn app). I get access to my local lan (192.168.0.0./24) but not to the internet.
I want to surf in the internet over the openvpn server when i'm in a insecure network like a public WiFi-Network.

LAN 192.168.2.0/24
Router 192.168.2.1

Openvpn :

10.8.0.0/24

Server config:

openVPN : Enabled
Start Type: WAN Up
Config as : Server
Server mode: Router (TUN)
Network: 10.8.0.0
Netmask: 255.255.255.0
Port: 1194
Tunnel Protocol: TCP
Encryption Cipher: AES-128-CBC
Hash Algorithm: SHA1
Advanced Options: Enable
TLS Cipher: None
LZO: Yes
Redirect default Gateway: Enable
Allow Client to Client: Enable
Allow duplicate cn : Enable
Tunnel MTU setting: 1500
Tunnel UDP Fragment: leer
Tunnel UDP MSS-Fix: Disable

and the certificates ...

Firewall:

At the Administration/Command/Firewall tab

iptables -I INPUT 1 -p tcp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
iptables -I FORWARD -i tun2 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -o tun2 -j MASQUERADE

Route:

root@D-Link:/tmp/var/log# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 80.xx.xx.1 0.0.0.0 UG 0 0 0 eth1
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun2
80.xx.xx.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 br0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 br1

Config at Nexus:

# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold

# Log window is better readable this way
suppress-timestamps
client
verb 2
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote MEINEDNYDNSADRESSE 1194 tcp-client
### From Keystore ####
<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
management-external-key
comp-lzo
route 192.168.2.1 255.255.255.0
remote-cert-tls server
cipher AES-128-CBC
float
# Use system proxy setting
management-query-proxy

I think i have a problem with routing or firewall.

rseiler

I think you have the problem of running too new a build:
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=151696

Though it's possible you'll be in the same boat as the last poster there, who can't revert back to the build I mentioned where this problem doesn't exist.

dd-droid

thank you, i will use my raspberry as openvpn server