[Resolved] OpenVpn on D-Link DSR-500N

myrcy

Hello,

I have an issue with the D-link DSR-500N SMB router which I picked especially because it had OpenVPN integrated.
Long story short after creating and uploading the certificates, configuring Openvpn on the router on port 1194, I can connect , the icon goes green but I cannot access any local resources on the LAN behind the router.
For the VPN I put 10.8.0.0 with 255.255.255.0 and the LAN behind the router is 192.168.125.0 255.255.255.0 .

Also if I use the Full tunnel option I have cannot do anything, on split tunnel at least I have access to the internet.
I looked over the dlink forums and opened a case with the support team but got no answer yet.

Does anyone know any issue or fix for this type of router to get openvpn running as it should be. I have updated it to the last WW firmware from the dlink site but still the same issue, connected but nothing works.

I have attahced the log pulled out from the client (Win 7 64bit machine) just removed the external ip.

Thanks for the support

Wed Nov 13 12:57:22 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Wed Nov 13 12:57:22 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Nov 13 12:57:22 2013 Need hold release from management interface, waiting...
Wed Nov 13 12:57:22 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Nov 13 12:57:22 2013 MANAGEMENT: CMD 'state on'
Wed Nov 13 12:57:22 2013 MANAGEMENT: CMD 'log all on'
Wed Nov 13 12:57:22 2013 MANAGEMENT: CMD 'hold off'
Wed Nov 13 12:57:22 2013 MANAGEMENT: CMD 'hold release'
Wed Nov 13 12:57:23 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Nov 13 12:57:23 2013 UDPv4 link local: [undef]

Wed Nov 13 12:57:23 2013 MANAGEMENT: >STATE:1384340243,WAIT,,,
Wed Nov 13 12:57:23 2013 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Wed Nov 13 12:57:25 2013 MANAGEMENT: >STATE:1384340245,AUTH,,,

Wed Nov 13 12:57:26 2013 VERIFY OK: depth=1,
Wed Nov 13 12:57:26 2013 VERIFY OK: nsCertType=SERVER
Wed Nov 13 12:57:26 2013 VERIFY OK: depth=0,
Wed Nov 13 12:57:27 2013 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1542', remote='link-mtu 1541'
Wed Nov 13 12:57:27 2013 WARNING: 'comp-lzo' is present in local config but missing in remote config, local='comp-lzo'
Wed Nov 13 12:57:27 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 13 12:57:27 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 13 12:57:27 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Nov 13 12:57:27 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Nov 13 12:57:27 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

Wed Nov 13 12:57:29 2013 MANAGEMENT: >STATE:1384340249,GET_CONFIG,,,
Wed Nov 13 12:57:30 2013 SENT CONTROL [EVCAUD]: 'PUSH_REQUEST' (status=1)
Wed Nov 13 12:57:30 2013 PUSH: Received control message: 'PUSH_REPLY,route 192.168.125.0 255.255.255.0,route 10.8.0.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Wed Nov 13 12:57:30 2013 OPTIONS IMPORT: timers and/or timeouts modified
Wed Nov 13 12:57:30 2013 OPTIONS IMPORT: --ifconfig/up options modified
Wed Nov 13 12:57:30 2013 OPTIONS IMPORT: route options modified
Wed Nov 13 12:57:30 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Nov 13 12:57:30 2013 MANAGEMENT: >STATE:1384340250,ASSIGN_IP,,10.8.0.6,
Wed Nov 13 12:57:30 2013 open_tun, tt->ipv6=0
Wed Nov 13 12:57:30 2013 TAP-WIN32 device [Local Area Connection 4] opened: \\.\Global\{B222CBF6-54D2-41D3-B15A-C284EF74160C}.tap
Wed Nov 13 12:57:30 2013 TAP-Windows Driver Version 9.9
Wed Nov 13 12:57:30 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {B222CBF6-54D2-41D3-B15A-C284EF74160C} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Wed Nov 13 12:57:30 2013 Successful ARP Flush on interface [31] {B222CBF6-54D2-41D3-B15A-C284EF74160C}
Wed Nov 13 12:57:35 2013 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Wed Nov 13 12:57:35 2013 MANAGEMENT: >STATE:1384340255,ADD_ROUTES,,,
Wed Nov 13 12:57:35 2013 C:\Windows\system32\route.exe ADD 192.168.125.0 MASK 255.255.255.0 10.8.0.5
Wed Nov 13 12:57:35 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Nov 13 12:57:35 2013 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 12:57:35 2013 C:\Windows\system32\route.exe ADD 10.8.0.0 MASK 255.255.255.0 10.8.0.5
Wed Nov 13 12:57:35 2013 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Wed Nov 13 12:57:35 2013 Route addition via IPAPI succeeded [adaptive]
Wed Nov 13 12:57:35 2013 Initialization Sequence Completed
Wed Nov 13 12:57:35 2013 MANAGEMENT: >STATE:1384340255,CONNECTED,SUCCESS,10.8.0.6,

myrcy

Ok,
I found this topic and realized that DSR 500N has no compression like the 250N also probably that is why the comp-lzo error was there, so I removed from the config file of the client the comp-lzo line, also I configured the openvpn server as the user Thiesy did.
https://forums.openvpn.net/topic11132.html

Also I wanted to test on a win7 32 bit using the keys that were already generated. The logfile changed as below. I tried to access the network behind the router but no change.
Tried to ping 192.168.125.7 but no response.
Also if I run a ipconfig under the tap adaptor I have no default gateway values.

Thanks,
Mircea

Thu Nov 21 16:48:07 2013 OpenVPN 2.3.2 i686-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [IPv6] built on Aug 22 2013
Thu Nov 21 16:48:09 2013 UDPv4 link local: [undef]
Thu Nov 21 16:48:09 2013 UDPv4 link remote: [AF_INET]remoteip:1194
Thu Nov 21 16:48:13 2013 [EVCAUD] Peer Connection Initiated with [AF_INET]remoteip:1194
Thu Nov 21 16:48:16 2013 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Thu Nov 21 16:48:16 2013 open_tun, tt->ipv6=0
Thu Nov 21 16:48:16 2013 TAP-WIN32 device [Local Area Connection 4] opened: \\.\Global\{641E7CA7-D45F-4ED4-B02F-61E3F5ADD96E}.tap
Thu Nov 21 16:48:16 2013 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.201.6/255.255.255.252 on interface {641E7CA7-D45F-4ED4-B02F-61E3F5ADD96E} [DHCP-serv: 192.168.201.5, lease-time: 31536000]
Thu Nov 21 16:48:16 2013 Successful ARP Flush on interface [16] {641E7CA7-D45F-4ED4-B02F-61E3F5ADD96E}
Thu Nov 21 16:48:21 2013 Initialization Sequence Completed

myrcy

Hi, yes I had the manual but it was not very helpful in this case. It seems the final fix was a cold boot of the router.
Now it works.
Thanks for the tips.