tossom
Hello experts,
I need help with my Asus RT-N66U router running the latest Merlin firmware (374.33) which includes a built-in openvpn server. The server settings are:
Service state: on
start with wan: yes
interface type: tun
protocol: tcp
port: 443
firewall: automatic
authorisation mode: tls
extra hmac authorisation: disabled
vpn subnet/ mask: 10.168.1.1 255.255.255.0
Poll interval: 0
push LAN to clients: yes
direct clients to redirect internet traffic: no
respond to dns: no
encryption cypher: aes-128-cbc
compression: adaptive
tls renegotiation time: -1
manage client specific options: no
The client config is the following:
client
server-poll-timeout 4
connect-retry-max 5
resolv-retry 60
nobind
remote remoteadress.no-ip.com 443 tcp
dev tun
ns-cert-type server
remote-cert-tls server
cipher AES-128-CBC
comp-lzo
verb 3
ca ca.crt
cert client1.crt
key client1.key
If I add push "redirect-gateway def1" to the server settings, the openvpn client installed on my laptop (win7 pro) will connect to the server, but I can't load any web pages. I am also using the openvpn client under IOS. If I add there in the client config file "redirect-gateway def1", than all web traffic from the IOS device is going through the router without any problems (without changing the server settings to redirect the internet traffic). If I use the same client configuration which works under IOS on my laptop, it's also not possible to load web pages. Once again, only the LAN side can be reached. Does anyone have maybe an idea what’s going wrong? Would be nice to get working on my Laptop as well. Thank you
tossom
Ok, so I had to add
push "dhcp-option DNS 192.168.1.1"
push "redirect-gateway def1"
to the server config, now it works like a charm.
chipgoon
Hi, I have the same router and had similar issue. Thanks for the helpful solution.
I would just like to note that in the server options, selecting "direct clients to redirect internet traffic: yes" has the same effect as adding the command: push "redirect-gateway def1"
So in my case, I set that option to yes, and only had to add the push DNS command manually.
Cheers
