open up a specific port for ovpn-client connected to router

wildchild90

This thread was very helpful for my troubleshooting, and I am glad I stumbled upon it via Google searching.
https://forums.openvpn.net/topic14351.html

I thought I could direct a question here, as it is very specific to my set-up.

Basically, after selecting "direct clients to redirect internet traffic: yes" -- computers connected via the OpenVPN client to the server running my ASUS Router have all traffic redirected.

I generally know how to port forward for computers connected directly to the wireless network (physically connected). How do I open up a specific port for computers connected to the router through OpenVPN clients? If I could figure that out I would be a happy camper!!

Traffic

wildchild90 wroteHow do I open up a specific port for computers connected to the router through OpenVPN clients?

Do you mean to open a port on your router and forward incoming packets to a VPN client ?

wildchild90

Traffic wrote
wildchild90 wroteHow do I open up a specific port for computers connected to the router through OpenVPN clients?
Do you mean to open a port on your router and forward incoming packets to a VPN client ?

Essentially when I am on my laptop and connected to OpenVPN (with all traffic, including web-browsing, on the laptop routed through the VPN server), I want a specific port to be on: http://www.canyouseeme.org.

I came up with a partial solution.

When I connect to OpenVPN on the laptop, I am assigned an IP address

.

Now, if I go to the WAN area of my router set-up,

, I can open the port for the client by using the IP address assigned when I log onto the VPN.

Now if I go to: http://www.canyouseeme.org/

The IP address of the ROUTER is shown (not that of the VPN client), and when I put in the port "53708" it shows as OPEN.

However, two issues.

1) This work-around doesn't appear to be consistent. Sometimes it will say "Success" that the port is open, and other times it won't.
2) I'm not assigned the same IP when I log onto the VPN. Sometimes I am given 10.8.0.6, other times 10.8.0.10, and other times 10.8.0.14; I don't know how to be assigned a "static" VPN IP address every time I log onto the VPN so that whatever forwarding I did in the WAN (which admittedly, doesn't always work), executes.

wildchild90

I got the idea to forward 10.8.0.1 from http://serverfault.com/questions/670016/openvpn-open-ports-for-clients-only-via-iptables

Do you think if I use the subnet 10.8.0.0 then it will forward for any IP assigned to the laptop?

Traffic

wildchild90 wrote1) This work-around doesn't appear to be consistent. Sometimes it will say "Success" that the port is open, and other times it won't.
2) I'm not assigned the same IP when I log onto the VPN. Sometimes I am given 10.8.0.6, other times 10.8.0.10, and other times 10.8.0.14; I don't know how to be assigned a "static" VPN IP address every time I log onto the VPN so that whatever forwarding I did in the WAN (which admittedly, doesn't always work), executes

To assign static IPs to your clients you need to use --client-config-dir in order to always push the desired IP to the specific client.

See --client-config-dir in The Manual v23x

wildchild90 wroteDo you think if I use the subnet 10.8.0.0 then it will forward for any IP assigned to the laptop?

Probably not .. assign a static IP as above and try that.

Note: The details above are for OpenVPN, your router may not have these options available via the GUI. If you have a Custom commands field (or similar) you may be able to insert the commands directly into the server config or even edit the server config file directly ..