I have two DDWRT routers which are connected, but the client is not able to access the internet. I have researched thoroughly and implemented the redirect-gateway and Masquerade fix, but still nothing. Server config: [code]push "route 192.168.9.0 255.255.255.0" push "dhcp-option DNS 8.8.8.8" push "redirect-gateway def1" server 192.168.66.0 255.255.255.0 dev tun0 proto udp keepalive 10 120 dh /tmp/openvpn/dh.pem ca /tmp/openvpn/ca.crt cert /tmp/openvpn/cert.pem key /tmp/openvpn/key.pem management localhost 5001[/code] client config: [code] remote XXXXserver.dyndns.org 1194 client remote-cert-tls server dev tun0 proto udp resolv-retry infinite nobind persist-key persist-tun float ca ca.crt cert client1.crt key client1.key[/code] Firewall: [code]iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -o vlan2 -j MASQUERADE[/code] (ps - i have the maserquerade set to vlan2 because when I do a route -n command, vlan2 is where my public IP is listed)

Two DDWRT Routers connected, but no internet on client

stizzi

I have two DDWRT routers which are connected, but the client is not able to access the internet.

I have researched thoroughly and implemented the redirect-gateway and Masquerade fix, but still nothing.

Server config:

push "route 192.168.9.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
server 192.168.66.0 255.255.255.0

dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001

client config:

remote XXXXserver.dyndns.org 1194

client 
remote-cert-tls server 
dev tun0 
proto udp 
resolv-retry infinite 
nobind 
persist-key 
persist-tun 
float

ca ca.crt 
cert client1.crt 
key client1.key

Firewall:

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -o vlan2 -j MASQUERADE

(ps - i have the maserquerade set to vlan2 because when I do a route -n command, vlan2 is where my public IP is listed)

stizzi

I made some changes...

Server config:

push "route 192.168.54.0 255.255.255.0" 
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1" 
server 10.8.0.0 255.255.255.0 

dev tun0 
proto udp 
port 1195
keepalive 10 120 
comp-lzo
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem

management localhost 5001

Client config:

remote XXXXserver.dyndns.org 1195

client 
remote-cert-tls server 
dev tun0 
proto udp 
resolv-retry infinite 
nobind 
persist-key 
persist-tun 
float
comp-lzo

ca ca.crt 
cert client1.crt 
key client1.key

Here is the error I get:

Client log:

20140303 00:17:06 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key 
20140303 00:17:06 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication 
20140303 00:17:06 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key 
20140303 00:17:06 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication 
20140303 00:17:06 Control Channel: TLSv1 cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA 1024 bit RSA 
20140303 00:17:06 I [server] Peer Connection Initiated with 99.231.y.y:1195 
20140303 00:17:09 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) 
20140303 00:17:09 PUSH: Received control message: 'PUSH_REPLY route 192.168.54.0 255.255.255.0 dhcp-option DNS 8.8.8.8 redirect-gateway def1 route 10.8.0.1 topology net30 ping 10 ping-restart 120 ifconfig 10.8.0.6 10.8.0.5' 
20140303 00:17:09 OPTIONS IMPORT: timers and/or timeouts modified 
20140303 00:17:09 OPTIONS IMPORT: --ifconfig/up options modified 
20140303 00:17:09 OPTIONS IMPORT: route options modified 
20140303 00:17:09 NOTE: --mute triggered... 
20140303 00:17:09 1 variation(s) on previous 5 message(s) suppressed by --mute 
20140303 00:17:09 I TUN/TAP device tun1 opened 
20140303 00:17:09 TUN/TAP TX queue length set to 100 
20140303 00:17:09 I /sbin/ifconfig tun1 10.8.0.6 pointopoint 10.8.0.5 mtu 1500 
20140303 00:17:09 /sbin/route add -net 99.231.y.y netmask 255.255.255.255 gw 99.232.16.1 
20140303 00:17:09 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.5 
20140303 00:17:09 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.5 
20140303 00:17:09 /sbin/route add -net 192.168.54.0 netmask 255.255.255.0 gw 10.8.0.5 
20140303 00:17:09 /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5 
20140303 00:17:09 I Initialization Sequence Completed 
20140303 00:17:10 N write UDPv4 [EMSGSIZE Path-MTU=1500]: Message too long (code=97) 
20140303 00:17:10 N write UDPv4 [EMSGSIZE Path-MTU=1500]: Message too long (code=97) 
20140303 00:17:10 N write UDPv4 [EMSGSIZE Path-MTU=1500]: Message too long (code=97) 
20140303 00:17:10 N write UDPv4 [EMSGSIZE Path-MTU=1500]: Message too long (code=97) 
20140303 00:17:11 N write UDPv4 [EMSGSIZE Path-MTU=1500]: Message too long (code=97) 
20140303 00:17:11 MANAGEMENT: Client connected from 127.0.0.1:5001 
20140303 00:17:11 D MANAGEMENT: CMD 'state' 
20140303 00:17:12 MANAGEMENT: Client disconnected 
20140303 00:17:12 MANAGEMENT: Client connected from 127.0.0.1:5001 
20140303 00:17:12 D MANAGEMENT: CMD 'state' 
20140303 00:17:12 MANAGEMENT: Client disconnected 
20140303 00:17:12 MANAGEMENT: Client connected from 127.0.0.1:5001 
20140303 00:17:12 D MANAGEMENT: CMD 'state' 
20140303 00:17:12 MANAGEMENT: Client disconnected 
20140303 00:17:12 MANAGEMENT: Client connected from 127.0.0.1:5001 
20140303 00:17:12 D MANAGEMENT: CMD 'log 500' 
19700101 00:00:00

Server log:

Serverlog Clientlog 20140303 00:16:57 I OpenVPN 2.2.1 mipsel-linux [SSL] [LZO2] [EPOLL] built on Apr 7 2012 
20140303 00:16:57 W NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables 
20140303 00:16:58 W WARNING: file '/tmp/openvpn/key.pem' is group or others accessible 
20140303 00:16:58 I TUN/TAP device tun0 opened 
20140303 00:16:58 I /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500 
20140303 00:16:58 W WARNING: External program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info. 
20140303 00:16:58 W WARNING: Failed running command (--route-up): external program fork failed 
20140303 00:16:58 I UDPv4 link local (bound): [undef]:1195 
20140303 00:16:58 I UDPv4 link remote: [undef] 
20140303 00:16:58 I Initialization Sequence Completed 
20140303 00:17:05 I 99.232.x.x:32772 Re-using SSL/TLS context 
20140303 00:17:05 I 99.232.x.x:32772 LZO compression initialized 
20140303 00:17:06 I 99.232.x.x:32772 [client1] Peer Connection Initiated with 99.232.x.x:32772 
19700101 00:00:00

Firewall:

iptables -I INPUT 1 -p udp --dport 1195 -j ACCEPT
iptables -I FORWARD 1 --source 10.8.0.0/24 -j ACCEPT 
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT 
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT 
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -I INPUT 2 -i tun0 -j ACCEPT

The DDWRT interface says both are connected, but the internet isn't working... Any help would be greatly appreciated.