Hi i have an issue getting my OpenVPN to do what I want it. My goal. I have an openvpn server running on Linksys wrt1900ac router. I want to use this in 'full tunnel' mode, meaning that ALL traffic i generate on my iphone, will be tunneled to my wrt1900, and from that point it must be routed into my lan or onto the internet. My challenge. Currently, my I can reach my LAN ip addresses (so i do get tunnel/connection to my router), but traffic to the internet goes from my device straight onto internet and not through my wrt1900 (whatsmyip.com shows the IP addy I got from 3G provider, even when connection is on). Thus, it seems i have only split tunnel. My situation I run the lastest version of OpenVPN connect on iphone 5. I have ovpn configs for two servers I run - the wrt1900 server, this behaves as described abot - an openvpn server on a synology nas in my lan. this connection DOES give me full tunneling, to be verified by the IP addy shown in whatsmyip.com (which is same as my ISP WAN side addy, as one would expect). I have been in contact with linksys for quite some time now, but apart from talking a lot to them about my current setup, I have not really made any progress. As a result from some thinking i did (and some reading on various openvpn-pages), my think this behaviour (full tunnel vs split tunnel) is a setting in the config files my ovpn server provides to load onto my iphone app. below is the text I have in my ovpn from wrt1900. it appears (when comparing with the synoloy config file) that i need to use "redirect-gateway def1". but if i enter that line in my wrt1900 client side config file, i dont have ANY response from ANY site (so split tunnel doesnt work anymore). I guess i need more config options, but have trouble finding out which ones. What do I need to achieve full tunneling on my WRT1900 vpn connection, just like i can have it on my synology vpn? (in case you may wonder why i dont just run VPN from my synology - i dont wana abuse my NAS to run a service which I think belongs in a router) BASIC INFO REGARDING MY WRT1900 (OVPN) SETTINGS ================================= Subnet for WRT1900: 10.157.147.xxx VPN IP range: 172.19.1.(2-6) ConfigFile: client dev tun proto tcp remote 1194 tun-mtu 6000 mssfix 0 resolv-retry infinite nobind persist-key persist-tun ns-cert-type server auth-user-pass verb 3 blablabla blabla blablabla

You should find in your router openvpn configuration menus an option to "redirect all client data over the VPN" or something like that. Enable that option and download the client config to your client device and try again.

No, i dont have that option :-( all i get is an option to set VPN server addy, vpn IP subnet (to some extent), port number and protocol. so I was hoping i could find out which settings to add to the generated config file which i then load into my phone. essentially, this is a client side setting (as the vpn client app decides to send to the vpn server or not). at least, i believe this is how it works

[quote="mchp92"]No, i dont have that option[/quote]Then I suggest you demand your money back from Linksys. As far as I am concerned that product is over priced garbage. :o

That observation doesnt get me any closer to a full tunnel

Linksys offer this paltry document .. [url]http://www.linksys.com/us/support-article?articleNum=157327[/url] So I suggest you contact them.

I did all thats in the doc I can connect to vpn But only split tunnel I did also contact them My case is with 3rd line support now but its s l o w

[quote="mchp92"]i need to use "redirect-gateway def1". but if i enter that line in my wrt1900 client side config file, i dont have ANY response from ANY site[/quote]add this to your client, then connect and post output of [b]ip route[/b]

How do i get that output on my iphone?

@Traffic Bump. What exactly are you asking me to do?

[quote="Traffic"][quote="mchp92"]i need to use "redirect-gateway def1". but if i enter that line in my wrt1900 client side config file, i dont have ANY response from ANY site[/quote]add this to your client, then connect and post output of [b]ip route[/b][/quote] Elaborate, please?

Linksys wrt1900ac router: How to achieve full tunnel?

svss

Ok, I thought I got it to work by adding the "push" at the beginning of the "redirect-gateway def 1". e.g:

client
dev tun
proto tcp
remote my_server 1194
tun-mtu 1482
# fragment 0 can be used to improve performance in some instances but
# breaks compatibility with some Android apps
# fragment 0
mssfix 0
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
auth-user-pass
verb 3
push dhcp-option DNS 8.8.8.8
push redirect-gateway def1

...but it didn't.

What's the difference between a statement in the file and the same statement with push preceding it?

TinCanTech

svss wroteOk, I thought I got it to work by adding the "push" at the beginning of the "redirect-gateway def 1". e.g:

client
<snip>
push dhcp-option DNS 8.8.8.8
push redirect-gateway def1
...but it didn't.

What's the difference between a statement in the file and the same statement with push preceding it?

Q. How do I find out what --push does ?
A. See --push in The Manual v24x

Q. How can I get help for my problem ?
A. Please see: HOWTO: Request Help !

I am tempted to report this thread to a moderator !

Why ?

Not only has the initial query been practically resolved:

https://forums.openvpn.net/posting.php?mode=reply&f=6&t=20982#pr66824
KoCMoHaBTa wroteThis works for WRT1900ACS - https://community.linksys.com/t5/Wireless-Routers/WRT-1900-ACS-Impossible-to-route-web-traffic-via-openvpn/m-p/1054366/highlight/true#M327438

You can try if it works for WRT1900AC.
But also, it is not worth destroying the use that this thread has provided for at least 5 thousand other users for one person. This thread should be split from svss's initial post.
IE: https://forums.openvpn.net/posting.php?mode=reply&f=6&t=20982#pr69926

@ svss .. please take a look at your router manual and find out how to upload your Openvpn log.

@ Jlennemann .. you are welcome to continue helping but this thread should be closed.

IMHO, this thread has become fairly useless ..

mordack

No, the issue has not been practically resolved, unless buying a WRT1900ACS to replace my WRT1900AC is a practical solution to you. I've been following his thread for a LONG time waiting for a resolution.

This issue is still not resolved on the WRT1900AC. Why should he thread be split when people are still working on a solution. No amount of ovpn config file hackery currently makes this work. Although I'd agree that's a Linksys issue, not an OpenVPN issue, this thread should not be closed unless an actual resolution is found or Linksys officially states why this can't be achieved (or why they won't implement this functionality).

Jlennemann

You've been following this thread for a LONG time yet you joined the forum today?

TinCanTech

In three pages not one single person has had the common sense to upload their server log at --verb 4 .. :roll:

Jlennemann

I've since moved onto an Asus router with OpenVPN server however, I do not remember the Linksys router giving the user the ability to look at the server logs.

TinCanTech

Does Linksys have an option to send to a remote syslog ?

Jlennemann

Not that I'm aware of. The lack of this along with other things is the reason why I switched to ASUS.

ser

I had the same issue with WRT3200ACS. Adding redirect-gateway def 1 to the vpn config file did the trick. Thank you for having this critical information here.

« Previous Page