tayl0r Hello, I have an openVPN AS server running in AWS. I have a standard home network that consists of an ISP provided modem/router (single public IP + NAT). On this home network, I have a computer that is always connected to the VPN. I have setup the port forwarding of the router so that the SSH port (22) forwards to the local area IP of the computer. Unfortunately, that SSH connection on the ISP IP (the real public IP) doesn't work if the computer is connected to VPN. I get a timeout. The SSH connection does work on the VPN IP. But, that only works from other clients who are VPNd and I want to be able to SSH without being VPNd. I'm not sure how to debug where the connection is failing further. It would be nice if I could ssh into the router and do some debugging there but that is impossible since it's just a crappy ISP provided modem/router with not a lot of features. Is this solvable? I'm using a mostly out of the box configuration. I haven't changed much, all I did was configure it so the other VPN clients can connect to each other using their VPN IPs.
Traffic tayl0r wroteUnfortunately, that SSH connection on the ISP IP (the real public IP) doesn't work if the computer is connected to VPN. I get a timeout.Are you redirecting the clients default gateway ?
tayl0r I have the OpenVPN client settings set to route all traffic through the VPN. Is that what you mean? I have not changed anything manually in the local network settings.
tayl0r Ok, but that will break what I'm actually using the VPN for (so this box can hit a service that is firewalled to only allow VPN connections). There is only a specific hostname I need to hit via the VPN, and I can add that manually as a specific route I think. So how would I disable this option just for this 1 client? I don't see how to do that.
tayl0r I see this: https://community.openvpn.net/openvpn/wiki/IgnoreRedirectGateway But I can't actually figure out how to do it. I tried adding those various things to my client.ovpn config (that I downloaded from the openvpnas server) and then deleting + re-importing that file in the open vpn client, but nothing seems to work. I'm not even sure if it's picking up the client.ovpn changes.
Traffic You may find the Access Server Documentation more useful: https://openvpn.net/index.php/access-server/docs.html
