gerein
I'm struggling to properly establish a VPN-connection between my router (under DD-WRT) and my VPS running OpenVPN Access Server 1.8.3
I'm trying to establish selective routing of certain IP-blocks through the VPN while the the remaining traffic should go through the default gateway.
This works (case 1):
- Select "yes" for "Should client Internet traffic be routed through the VPN?" in web-interface
- "Have client use these DNS servers:" 8.8.8.8, 8.8.4.4
- On the client delete the default routes OpenVPN created (128.0.0.1/128.0.0.0, 0.0.0.0/128.0.0.0)
- Add routes for the IP-block to be routed through the VPN
This does not work (case 2):
- Select "no" for "Should client Internet traffic be routed through the VPN?" in web-interface
- "Do not alter client's DNS settings"
- Add standard route to VPN-server through normal gateway (as was created automatically in case 1)
- Add routes for the IP-block to be routed through the VPN
In case 1, I can access web-sites in the selected IP-block coming through the VPN. In case 2, requests in that block seem to get lost / get no reply (remaining traffic works). Not a DNS-problem, since I'm using IP-addressing directly.
The client routing table is 100% identical in both cases, so it shouldn't be a client-side routing problem. What could be the problem otherwise?
Any pointers appreciated!
(Below the "PUSH_REPLY" the client receives in either case:
Case 1/2:
explicit-exit-notify
topology subnet
route-delay 5 30
dhcp-pre-release
dhcp-renew
dhcp-release
route-metric 101
ping 5
ping-restart 40
auth-token SESS_ID_________________________
comp-lzo yes
route-gateway 10.10.11.1
Case 1 only:
redirect-gateway def1
redirect-gateway bypass-dhcp
redirect-gateway autolocal
dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4
register-dns
Case 2 only:
redirect-private local
redirect-private bypass-dhcp
redirect-private bypass-dns