OpenVPN works, but cannot ping client PCs

gregpeterson

Hello--Newbie here. I successfully set up OpenVPN on my TP-Link WR1043NDv2 (my home router, flashed with Gargoyle) and then proceeded to set up OpenVPN on a client computer (a Windows 7 laptop).

I took my Windows 7 laptop to another location with Internet access and successfully connected via OpenVPN. Success! However, while I could ping the TP-Link router, I could not ping or otherwise connect to the client PCs on my home LAN.

I have Googled this problem and while it shows up in many forum posts for many years, the solution(s) are not apparent. The best one that I can find seems to say that I need to insert the statement:

push "route 10.8.0.0 255.255.255.0"

Where and how do I insert this statement?

maikcat

I have Googled this problem and while it shows up in many forum posts for many years, the solution(s) are not apparent.

thats because this is mostly routing based problem not openvpn's one.

please post your configs and network address ranges used.

Michael.

gregpeterson

Will do later today. But in the meantime, can anyone answer my original question?

Where and how do I insert this statement?

push "route 10.8.0.0 255.255.255.0"

maikcat

in your server config,

DONT addit until we see your configs

Michael.

gregpeterson

I am connected to the router via SSH. What is the command to view the server.config file so that I can post the contents here?
(like I said, Newbie here)

gregpeterson

OK, here are my settings. Note that when I grabbed these, the router was off-line, so keep that in mind...

server.conf
mode server
port 1194
proto udp
tls-server
ifconfig 10.8.0.1 255.255.255.0
topology subnet
client-config-dir /etc/openvpn/ccd
client-to-client

cipher BF-CBC
keysize 128

dev tun
keepalive 25 180
status /var/openvpn/current_status
verb 3

dh /etc/openvpn/dh1024.pem
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
tls-auth /etc/openvpn/ta.key 0

persist-key
persist-tun
comp-lzo

push "topology subnet"
push "route-gateway 10.8.0.1"
push "redirect-gateway def1"

/etc/config/firewall is:
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'

config zone
option name 'lan'
list network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'

config zone
option name 'wan'
list network 'wan'
list network 'wan6'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'

/etc/config/network is:
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'

config interface 'lan'
option ifname 'eth1'
option type 'bridge'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.0.1'
option dns '8.8.8.8 8.8.4.4'

config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'

config switch_vlan
option device 'switch0'
option vlan '1'
option ports '0 1 2 3 4'

config switch_vlan
option device 'switch0'
option vlan '2'
option ports '5 6'

config interface 'wan'
option ifname 'eth0'
option proto 'dhcp'
option dns '8.8.8.8 8.8.4.4'
option peerdns '0'

If the advice turns out to be that I need to add a statement such as push "route 10.8.0.0 255.255.255.0", then please tell me HOW one adds this statement to the server.conf file.

Thanks!

maikcat

you dont need those:

mode server
tls-server
ifconfig 10.8.0.1 255.255.255.0
push "route-gateway 10.8.0.1"

add this

server 10.8.0.0 255.255.255.0

gregpeterson

Thanks for the reply.

Can you explain how I can insert this statement? I presume that I cannot directly edit the server.conf via SSH. Instead, I am guess that I will have to download the server.conf file via SSH, edit it in Notepad or whatever, and then re-upload it via SSH?

maikcat

usually you can edit the server.conf directly except if your routers GUI re-creates it
from a template,if this occurs then you must configure openvpn from your router GUI only..

Michael.

gregpeterson

Do you mean that I can edit it directly using SSH? What is the SSH command to edit a file?

Traffic

SSH has no command to edit a file ...

maikcat

https://forums.openvpn.net/topic17652.html

to edit a file you will need an editor,
common linux editors are vi,nano

it all depends which one your system has installed.

Michael.