Traffic wrote...Try these tests from your client[/u]:
- ping 10.8.0.6 - Your client TUN - MUST WORK
- ping 10.8.0.1 - Your server TUN - MUST WORK
- ping 192.168.0.x - Your Asus router LAN (as you are routing for it) See final Notes below* Should Work
- ping 8.8.8.8 - google DNS by IP address - testing routing to the internet (Probably will not work)
- ping google.com - testing DNS and internet (almost definitely will not work)
I will do these the next time I am out at a "not me" wifi to test them.
I know the "ping 192.168.0.x - Your Asus router LAN (as you are routing for it)" will work because I can open the admin page that is "at" the router address. But pinging OTHER "dot x's" such as my printer does not work.
Traffic wrote... you
may need:
- # iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
- Ensure eth0 is the real name of your WAN adapter .. maybe WAN0
I am not working in linux, so I can only do that if putting it into the custom commands block as shown previously in an image would work...but I think not. I think that window is putting commands into the server config file.
Traffic wrote...You are pushing your router as your client DNS server (192.168.0.1) ..
Ensure what ever steps you need have been taken on your router that it can and will resolve DNS for the client. Or push google DNS servers to the client (Google DNS 8.8.8.8 & 8.8.4.4)
DNS servers are configured in the router (OpenDNS to be exact) and they are dhcp'ed to any client on my lan that gets a dhcp address, gateway, DNS, etc. So the router is providing them in that situation--and provides DNS when I do a non-VPN connection to it from the same client.
Traffic wroteAnd finally remember, if you take this out into the wild, you will run into routing conflicts because of your server LAN 192.168.0.0/24
And as I've said, I usually test this on hotspots around town that are provided by my ISP for its customers to use--and they definitely do not use the 192.168.0 subnet. I will be careful when connecting other places--and after I get this working, I will change my home net to a different one, but I don't want to be changing multiple things while troubleshooting.
