hi,
ive configured openvpn and i can ping the vpn server from my openwrt box.
openwrt is a vpn client.
according to:
http://wiki.openwrt.org/doc/howto/vpn.openvpn
i created these firewall rules:
uci set network.vpn0=interface
uci set network.vpn0.ifname=tun0
uci set network.vpn0.proto=none
uci add firewall rule
uci set firewall.@rule[-1].name=Allow-OpenVPN-Inbound
uci set firewall.@rule[-1].target=ACCEPT
uci set firewall.@rule[-1].src=*
uci set firewall.@rule[-1].proto=udp
uci set firewall.@rule[-1].dest_port=1194
uci add firewall zone
uci set firewall.@zone[-1].name=vpn
uci set firewall.@zone[-1].input=ACCEPT
uci set firewall.@zone[-1].forward=ACCEPT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].network=vpn0
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='vpn'
uci set firewall.@forwarding[-1].dest='wan'
uci commit network
/etc/init.d/network reload
uci commit firewall
/etc/init.d/firewall reload
but my lan clients still cant ping the vpn server, no reply.
any ideas?
my openvpn config:
client
dev tun
proto udp
remote andromeda-official 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert rust-belt.crt
key rust-belt.key
comp-lzo
verb 3
keepalive 10 120
i have not used uci to configure openvpn, the .config way looked easier and was already familiar.
openvpn is started via /etc/rc.local
cd /etc/openvpn && openvpn --config rust-belt.conf --daemon
which worked so far.
