[DD-WRT] OpenVPN connected but cannot access internet? WHY?

cpliu903

My OpenVPN connected, but cannot access internet.
How to fix this problem ??

server config:

push "route 192.168.11.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "redirect-gateway def1"
server 192.168.66.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
management localhost 5001

iptable

iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -t nat -A POSTROUTING -s 192.168.66.0/24 -j MASQUERADE

route -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
XXX.XXX.X.X     0.0.0.0         255.255.255.255 UH    0      0        0 eth1
192.168.66.2    0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.11.200  0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
192.168.66.0    192.168.66.2    255.255.255.0   UG    0      0        0 tun0
192.168.11.0    0.0.0.0         255.255.255.0   U     0      0        0 br0
XXX.XXX.X.0     0.0.0.0         255.255.252.0   U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 br0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         XXX.XXX.X.1     0.0.0.0         UG    0      0        0 eth1

cpliu903

I also have same problem.
VPN connected but cannot access internet and cannot ping 192.168.66.1, 192.168.66.5, 8.8.8.8. WHY ??

Ethernet adapter Local Area Connection 8:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-3A-6B-E6-2D
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::3d72:b2f3:c4b7:b70a%45(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.66.6(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.252
   Lease Obtained. . . . . . . . . . : Wednesday, October 22, 2014 10:33:16 PM
   Lease Expires . . . . . . . . . . : Thursday, October 22, 2015 10:33:16 PM
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 192.168.66.5
   DHCPv6 IAID . . . . . . . . . . . : 805371706
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-79-83-5D-F0-DE-F1-65-B0-2C

   DNS Servers . . . . . . . . . . . : 192.168.66.1
                                       8.8.8.8
   NetBIOS over Tcpip. . . . . . . . : Enabled

Traffic

cpliu903 wroteroute -n

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
XXX.XXX.X.X     0.0.0.0         255.255.255.255 UH    0      0        0 eth1
192.168.66.2    0.0.0.0         255.255.255.255 UH    0      0        0 tun0
192.168.11.200  0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
192.168.66.0    192.168.66.2    255.255.255.0   UG    0      0        0 tun0
192.168.11.0    0.0.0.0         255.255.255.0   U     0      0        0 br0 <<<<<----- You are using a Bridge
XXX.XXX.X.0     0.0.0.0         255.255.252.0   U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 br0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         XXX.XXX.X.1     0.0.0.0         UG    0      0        0 eth1

You have got your setup completely wrong ...

Where would you like to start ?

I suggest you read the Documentation thoroughly and follow the HOWTO examples:

After that .. Follow the Forum rules (top of page) very carefully .. please.

cpliu903

Traffic wrote You have got your setup completely wrong ...

Where would you like to start ?

I suggest you read the Documentation thoroughly and follow the HOWTO examples:

OpenVPN Community Edition Documentation

HOWTO: For OpenVPN Community Edition
After that .. Follow the Forum rules (top of page) very carefully .. please.

DD-WRT Router config:
LAN: 192.168.11.0/24
Router IP: 192.168.11.1
WAN: XXX.XXX.XXX.XXX

I don't know why 192.168.11.0 in the interface br0 ?
and the eth1 should be a WAN interface.