ikedw
Hello I need help
I configured a server with openvpn and linksys WRT54 ddwrt.
It all works but using the router kraun KRRS the vpn client surfs the internet while using the router dlink 2750U does not go on the internet.
I would like to know if I can change any parameter.
I already created the static route to the openvpn server and enabled the redirect.
-gateway.
my configuration server
server 20.8.0.0 255.255.255.0
dev tun0
proto tcp
port 443
keepalive 10 120
push "route 192.168.0.0 255.255.255.0"
push "redirect-gateway"
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
comp-lzo
cipher AES-256-CBC
auth SHA512
tls-cipher DHE-RSA-AES256-SHA
max-clients 5
client-to-client
duplicate-cn
client
client
dev tun
proto tcp
remote xxxxxxxx
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
cipher AES-256-CBC
auth SHA512
tls-cipher DHE-RSA-AES256-SHA
comp-lzo
verb 3
ip server opnvpn 192.168.0.50
ip router 192.168.0.50
ip vpn 20.8.65.1
static route on router 20.8.0.0 255.255.255.0 ---- 192.168.0.50
route dlink 2750U show router
> route show
Kernel IP routing table
Destination G ateway Genmask Flags Metric Ref Use Iface
192.168.100.1 * 255.255.255.255 UH 0 0 0 pppoa0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
20.8.65.0 192.168.0.50 255.255.255.0 UG 0 0 0 br0
192.168.10.0 192.168.0.101 255.255.255.0 UG 0 0 0 br0
10.0.0.0 192.168.0.101 255.0.0.0 UG 0 0 0 br0
default * 0.0.0.0 U 0 0 0 pppoa0
route show ddwrt wrt54
root@DD-WRT:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
20.8.0.2 * 255.255.255.255 UH 0 0 0 tun0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
20.8.0.0 20.8.0.2 255.255.255.0 UG 0 0 0 tun0
169.254.0.0 * 255.255.0.0 U 0 0 0 br0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.0.100 0.0.0.0 UG 0 0 0 br0
Firewall is disable on the router and the ddwrt.
thanks
Giuliano
ikedw
traceroute command list
traceroute 8.8.8.8
1 20.8.65.1
2 192.168.0.100
3 stopped
Some ideas
many thanks
By ikedw
ikedw
solved
add postrouting masquerade on server vpn
Thanks
