Hello Guys,
i have a problem with the OpenVPN connection.
Server:
TPLink 1043ND mit DDWRT
Subnetz 192.168.42.0/24
IP 192.168.42.1
Subnetz OpenVPN 192.168.142.0/24
I can connect from the Roadwarrior to the OpenVPN-Server.
The Roadwarrior will get the IP 192.168.142.2
The Roadwarrior can ping all Clients in the Subnet 192.168.42.0/24 (Networkprinter etc.)
All Clients in 192.168.42.0/24 can ping the Roadwarrior with ping 192.168.142.2
The Roadwarrior can resolv hostnames from internet (nameserver 192.168.42.1)
But it is not possible to access to the internet.
Can anyone help me?
Routingtable of DD-WRT Router with OpenVPN:
0.0.0.0 0.0.0.0 217.0.118.129 UG 0 ppp0
169.254.0.0 255.255.0.0 0.0.0.0 U 0 LAN & WLAN
192.168.42.0 255.255.255.0 0.0.0.0 U 0 LAN & WLAN
192.168.142.0 255.255.255.0 0.0.0.0 U 0 tun2
192.168.142.0 255.255.255.0 192.168.42.1 UG 1 LAN & WLAN
217.0.118.129 255.255.255.255 0.0.0.0 UH 0 ppp0
My OpenVPN-Server config:
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 1194
proto tcp-server
cipher aes-256-cbc
auth sha512
client-config-dir /tmp/openvpn/ccd
comp-lzo adaptive
tls-server
client-to-client
push "redirect-gateway def1"
tls-cipher AES256-SHA
tcp-nodelay
tun-mtu 1500
mtu-disc yes
server 192.168.142.0 255.255.255.0
dev tun2
tun-ipv6
tls-auth /tmp/openvpn/ta.key 0
push "dhcp-option DNS 192.168.42.1"
push "dhcp-option DOMAIN local.home"
ifconfig-pool-persist /tmp/openvpn/ipp.txt
Log of a client connection:
20130917 21:17:30 I TCP connection established with [AF_INET]80.187.108.183:19931
20130917 21:17:30 Socket flags: TCP_NODELAY=1 succeeded
20130917 21:17:30 80.187.108.183:19931 TLS: Initial packet from [AF_INET]80.187.108.183:19931 sid=3e259a7f a6a9368c
20130917 21:17:31 80.187.108.183:19931 VERIFY OK: depth=1 C=DE ST=BW L=xxxxxxxxxx O=privat CN=xxxxxxxxxx.no-ip.org name=xxxxxxxxxx xxxxxxxxxx emailAddress=xxxxxxxxxx.xxxxxxxxxx@xxx.xxx
20130917 21:17:31 80.187.108.183:19931 VERIFY OK: depth=0 C=DE ST=BW L=xxxxxxxxxx O=privat CN=xxxxxxxxxx_handy name=xxxxxxxxxx xxxxxxxxxx emailAddress=s.xxxxxxxxxx@xxx.xxx
20130917 21:17:31 80.187.108.183:19931 NOTE: --mute triggered...
20130917 21:17:31 80.187.108.183:19931 5 variation(s) on previous 3 message(s) suppressed by --mute
20130917 21:17:31 I 80.187.108.183:19931 [xxxxxxxxxx_handy] Peer Connection Initiated with [AF_INET]80.187.108.183:19931
20130917 21:17:31 I xxxxxxxxxx_handy/80.187.108.183:19931 MULTI_sva: pool returned IPv4=192.168.142.2 IPv6=(Not enabled)
20130917 21:17:31 xxxxxxxxxx_handy/80.187.108.183:19931 MULTI: Learn: 192.168.142.2 -> xxxxxxxxxx_handy/80.187.108.183:19931
20130917 21:17:31 xxxxxxxxxx_handy/80.187.108.183:19931 MULTI: primary virtual IP for xxxxxxxxxx_handy/80.187.108.183:19931: 192.168.142.2
20130917 21:17:32 xxxxxxxxxx_handy/80.187.108.183:19931 PUSH: Received control message: 'PUSH_REQUEST'
20130917 21:17:32 I xxxxxxxxxx_handy/80.187.108.183:19931 send_push_reply(): safe_cap=940
20130917 21:17:32 xxxxxxxxxx_handy/80.187.108.183:19931 SENT CONTROL [xxxxxxxxxx_handy]: 'PUSH_REPLY redirect-gateway def1 dhcp-option DNS 192.168.42.1 dhcp-option DOMAIN xxxxxxxxxx.local route-gateway 192.168.142.1 topology subnet ping 10 ping-restart 120 socket-flags TCP_NODELAY ifconfig 192.168.142.2 255.255.255.0' (status=1)
20130917 21:17:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130917 21:17:35 D MANAGEMENT: CMD 'state'
20130917 21:17:35 MANAGEMENT: Client disconnected
20130917 21:17:35 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130917 21:17:35 D MANAGEMENT: CMD 'state'
20130917 21:17:35 MANAGEMENT: Client disconnected
20130917 21:17:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130917 21:17:36 D MANAGEMENT: CMD 'state'
20130917 21:17:36 MANAGEMENT: Client disconnected
20130917 21:17:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130917 21:17:36 D MANAGEMENT: CMD 'status 2'
20130917 21:17:36 MANAGEMENT: Client disconnected
20130917 21:17:36 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:14
20130917 21:17:36 D MANAGEMENT: CMD 'log 500'
19700101 00:00:00
Clientlog
