hi, i would like to use my current router with "redirect-gateway" to tunnel all my lan client traffic to the vpn server. both things work on their own: the machine does work as a router without vpn running i can browse the web from my "temporary" router with redirect... but activiating the vpn connection does kill my clients connection to the internet. route -n: [code]0.0.0.0 10.8.33.9 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 192.168.179.1 0.0.0.0 UG 0 0 0 wlan1 10.8.33.0 10.8.33.9 255.255.255.0 UG 0 0 0 tun0 10.8.33.9 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 88.198.127.82 192.168.179.1 255.255.255.255 UGH 0 0 0 wlan1 128.0.0.0 10.8.33.9 128.0.0.0 UG 0 0 0 tun0 192.168.178.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 192.168.179.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan1[/code] wlan1 goes to my neighboors router for internet access (my internet connection is damaged) lan clients come in over eth0 i have to say that i already had this working with help from #openvpn, but its been some time and i forgot how :( iirc correctly the solution was one entry in the routing table. the problem is that somehow my clients cant find their way to the internet if "redirect-gateway" is activated i look at it this way: 1: connection from lan client comes in via eth0, for example i want to see google.com 2: router looks at the routing table, decides that google.com isnt in my network and sends the request over the default route: which is 10.8.33.9 - but that obviously doesnt work any ideas?

ah yes, the vps was missing: [code]iptables -t nat -A POSTROUTING -s 192.168.178.0/24 -j MASQUERADE [/code] and in server.conf [code]route 192.168.178.0 255.255.255.0[/code] and in the clients ccd file [code]iroute 192.168.178.0 255.255.255.0[/code] although im not sure about the last two routes

Most of your post makes no sense :geek: Your NAT is wrong:[quote="newuser44"]Code: iptables -t nat -A POSTROUTING -s 192.168.178.0/24 [b][/b] -j MASQUERADE[/quote] Simple answer: Post server & client configs & logs (verb 4) And for brevity also post: ifconfig of server and client with VPN up.

redirect-gateway client as router

newuser44

hi,

i would like to use my current router with "redirect-gateway" to tunnel all my lan client traffic to the vpn server.

both things work on their own:
the machine does work as a router without vpn running
i can browse the web from my "temporary" router with redirect...

but activiating the vpn connection does kill my clients connection to the internet.

route -n:

0.0.0.0         10.8.33.9       128.0.0.0       UG    0      0        0 tun0
0.0.0.0         192.168.179.1   0.0.0.0         UG    0      0        0 wlan1
10.8.33.0       10.8.33.9       255.255.255.0   UG    0      0        0 tun0
10.8.33.9       0.0.0.0         255.255.255.255 UH    0      0        0 tun0
88.198.127.82   192.168.179.1   255.255.255.255 UGH   0      0        0 wlan1
128.0.0.0       10.8.33.9       128.0.0.0       UG    0      0        0 tun0
192.168.178.0   0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.179.0   0.0.0.0         255.255.255.0   U     0      0        0 wlan1

wlan1 goes to my neighboors router for internet access (my internet connection is damaged)
lan clients come in over eth0

i have to say that i already had this working with help from #openvpn, but its been some time and i forgot how 🙁
iirc correctly the solution was one entry in the routing table.

the problem is that somehow my clients cant find their way to the internet if "redirect-gateway" is activated
i look at it this way:
1: connection from lan client comes in via eth0, for example i want to see google.com
2: router looks at the routing table, decides that google.com isnt in my network and sends the request over the default
route: which is 10.8.33.9 - but that obviously doesnt work

any ideas?

newuser44

ah yes, the vps was missing:

iptables -t nat -A POSTROUTING -s 192.168.178.0/24 -j MASQUERADE

and in server.conf

route 192.168.178.0 255.255.255.0

and in the clients ccd file

iroute 192.168.178.0 255.255.255.0

although im not sure about the last two routes

Traffic

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.