Dear all, I trying to connect xbox one from my home networt to the internet using the vpn. The rest of my pcs should have "standard" access to the internet as now (by masquerade), so not through the vpn. The openvpn client is installed on my router (debian router). Xbox one (192.168.11.2) is connected to the internet by the wlan0 and I do not know how to redirect it to tun+. Could you please help me? Thank you in advance. The openvpn config: [code]client dev tun remote us03.vpne.eu 443 proto tcp-client remote-cert-tls server auth-user-pass /etc/openvpn/login.conf tls-client pull persist-key resolv-retry infinite reneg-sec 0 verb 3 script-security 2 system auth-nocache route-delay 2[/code] Route: [code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 10.100.200.0 10.100.201.21 255.255.252.0 UG 0 0 0 tun0 10.100.201.21 * 255.255.255.255 UH 0 0 0 tun0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 192.168.10.0 * 255.255.255.0 U 0 0 0 eth2 192.168.11.0 * 255.255.255.0 U 0 0 0 wlan0 [/code] Route after openvpn started: [code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 10.100.200.0 10.100.201.21 255.255.252.0 UG 0 0 0 tun0 10.100.201.21 * 255.255.255.255 UH 0 0 0 tun0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 192.168.10.0 * 255.255.255.0 U 0 0 0 eth2 192.168.11.0 * 255.255.255.0 U 0 0 0 wlan0[/code] [code]eth0 Link encap:Ethernet HWaddr 00:11:0a:54:bb:02 inet addr:192.168.1.14 Bcast:192.168.1.255 Mask:255.255.255.0 inet6 addr: fe80::211:aff:fe54:bb02/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:2137 errors:0 dropped:0 overruns:0 frame:0 TX packets:2182 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:176536 (172.3 KiB) TX bytes:321237 (313.7 KiB) eth2 Link encap:Ethernet HWaddr 00:11:0a:54:bb:03 inet addr:192.168.10.1 Bcast:192.168.10.255 Mask:255.255.255.0 inet6 addr: fe80::211:aff:fe54:bb03/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:468 (468.0 B) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) mon.wlan0 Link encap:UNSPEC HWaddr 14-CC-20-1F-B5-4D-00-00-00-00-00-00-00-00-00-00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:23229 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:2872405 (2.7 MiB) TX bytes:0 (0.0 B) tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.100.201.22 P-t-P:10.100.201.21 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) wlan0 Link encap:Ethernet HWaddr 14:cc:20:1f:b5:4d inet addr:192.168.11.1 Bcast:192.168.11.255 Mask:255.255.255.0 inet6 addr: fe80::16cc:20ff:fe1f:b54d/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:576 (576.0 B)[/code])

if you have a network with f.e 10 hosts and you want the 2 of them to access internet via a different gateway then you need to enable policy based routing on your router, in your case your debian. Michael.

My home local network is as below: gateway: 192.168.1.254 (modem) 192.168.1.1 - eth0 192.168.10.1 - eth2 (lan) 192.168.11.1 - wlan0 (wifi) 193.168.11.3 - xbox In openvpn client config file I added: [code]route-nopull. route 192.168.11.2 255.255.255.255[/code] Routing after I started the openvpn: [code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 10.100.201.21 * 255.255.255.255 UH 0 0 0 tun0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 192.168.10.0 * 255.255.255.0 U 0 0 0 eth2 192.168.11.0 * 255.255.255.0 U 0 0 0 wlan0 192.168.11.2 10.100.201.21 255.255.255.255 UGH 0 0 0 tun0[/code] Could you please help me with this? How to redirect the xbox to tun+?

lets go again, you have one debian which acts as a router, it has 3 interfaces lan,wan,wlan it also has an openvpn client which has 10.100.201.0 network, if your xbox wants to access 10.100.201.0 network and it has your debian as default gateway then you do not need anything else,its simply routing. but if your vpn provides you internet access is a different story... Michael.

In my last post I made the mistake: The xbox IP is 192.168.11.2 not 192.168.11.3.

it doesnt matter, does it uses 192.168.11.1 as default gateway? which ip do you want to access via xbox? Michael.

[quote="maikcat"]lets go again, you have one debian which acts as a router, it has 3 interfaces lan,wan,wlan it also has an openvpn client which has 10.100.201.0 network, [/quote]Yes, you right. [quote="maikcat"] if your xbox wants to access 10.100.201.0 network and it has your debian as default gateway then you do not need anything else,its simply routing. [/quote]The default gateway for my all pcs is 192.168.1.254. But I want to xbox to use the gateway from openvpn. [quote="maikcat"] but if your vpn provides you internet access is a different story... [/quote] The vpn is only to hide the real locaction of xbox.

[quote]But I want to xbox to use the gateway from openvpn.[/quote] your openvpn setup does NOT redirects your internet access, what resource you want your xbox to access? the 10.100.201.0 network? i insist on this info because you will need totaly different approach... Michael.

[quote="maikcat"]it doesnt matter, does it uses 192.168.11.1 as default gateway? which ip do you want to access via xbox? Michael.[/quote] - default gateway: 192.168.1.254 (modem) - 192.168.1.1 - eth0 - 192.168.10.1 - eth2 (lan) - 192.168.11.1 - wlan0 (wifi) - 193.168.11.2 - xbox - openvpn network is 10.100.201.0 All pcs from LAN 192.168.10.2-192.168.10.xxx should use default gataway 192.168.1.254 (modem). All pcs from WIFI 192.168.11.3-192.168.11.xxx should use default gataway 192.168.1.254 (modem). Only the xbox 192.168.11.2 shlould you the openvpn network. In openvpn client config file I added: [code]route-nopull. route 192.168.11.2 255.255.255.255[/code] Routing after I started the openvpn: [code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.1.254 0.0.0.0 UG 0 0 0 eth0 10.100.201.21 * 255.255.255.255 UH 0 0 0 tun0 192.168.1.0 * 255.255.255.0 U 0 0 0 eth0 192.168.10.0 * 255.255.255.0 U 0 0 0 eth2 192.168.11.0 * 255.255.255.0 U 0 0 0 wlan0 192.168.11.2 10.100.201.21 255.255.255.255 UGH 0 0 0 tun0[/code]

[quote]All pcs from LAN 192.168.10.2-192.168.10.xxx should use default gataway 192.168.1.254 (modem). All pcs from WIFI 192.168.11.3-192.168.11.xxx should use default gataway 192.168.1.254 (modem). Only the xbox 192.168.11.2 shlould you the openvpn network. [/quote] what you dont clarify is the openvpn network is to provide you an alternative internet access, if its not and you only need to access 10.100.201.0 then all you need is iptables rules to filter traffic and NAT the xbox ip. Michael.

remove the 2 directives you added. Michael.

How to redirect xbox from local network to tun+?

maikcat

In the client opencpn config I received from openvpn provider there was: "redirect-gateway def1" and I delete it.

the directive you deleted IS for changing your default gateway,
meaning that your internet IS redirected via the vpn provider.

What does it mean?

google is your friend.... 😉

https://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/

Michael.

jergen

maikcat wrote
In the client opencpn config I received from openvpn provider there was: "redirect-gateway def1" and I delete it.
the directive you deleted IS for changing your default gateway,
meaning that your internet IS redirected via the vpn provider.

What does it mean?
google is your friend.... 😉

https://kindlund.wordpress.com/2007/11/19/configuring-multiple-default-routes-in-linux/

Michael.

Is the other solution that I will configure my own openvpn server?

jergen

Dear Maikcat,

What option in opnevpn config file is responsible for redirection of ALL traffic?

maikcat

in server side you should see

push "redirect-gateway def1"

in your client

redirect-gateway def1

or with def1 ommited

Michael.

jergen

Hi Michel,

I finally installed openvpn on the vps server (freebsd). I genarated all requested keys but I have a problem to connect to it.

My idea is that the openvpn server was the easiest configured (minimalist configurations with maintaining of basic security). On the client (debian router) as you know I would like to redirect only xbox trafic to tun+ by iptables.
Could you help me again - revise my openvpn server config file and give me some tips how it should be? Thank you in advance.

Openvpn server.conf

proto udp
dev tun

ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/openvpn-client.crt
key /usr/local/etc/openvpn/keys/openvpn-client.key
dh /usr/local/etc/openvpn/keys/dh1024.pem

server 10.8.0.0 255.255.255.0
keepalive 10 120

comp-lzo no
status openvpn-status.log
verb3

« Previous Page