Cannot access some Lan clients but can access others...

sbmotoracer

Good afternoon,

I'm running openvpn on my router "ac66u" and I can't seem to access some of my Virtual machines that are connected off my main computer.

I have a couple of vms that is running a mix of ubuntu and windows 7. I can ping my main os that is running virtualbox and my windows vm but not my plex linux vm.

Server Config:

Server: Interface Type TUN
Protocol TCP
Server Port: 443 Firewall Auto Authorization Mode TLS VPN Subnet / Netmask 10.8.0.0 / 255.255.255.0
Push LAN to clients Yes Direct clients to redirect Internet traffic Yes Respond to DNS Yes Advertise DNS to clients Yes

push "redirect-gateway def1" push "route 192.168.1.3 255.255.255.255" push "route 192.168.1.6 255.255.255.255" push "dhcp-option DNS 192.168.1.1"

Client Config:

Enables connection to GUI

management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix management-client management-query-passwords management-hold

setenv IV_GUI_VER "de.blinkt.openvpn 0.6.47" setenv IV_PLAT_VER <snip> machine-readable-output ifconfig-nowarn client verb 4 connect-retry 5 resolv-retry 60 dev tun remote <snip> 443 tcp-client auth-user-pass

-----BEGIN CERTIFICATE----- <key> snip <ca> -----END CERTIFICATE-----

</ca> snip <key> -----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----

</key> snip <cert> -----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</cert> comp-lzo route-ipv6 ::/0 route 0.0.0.0 0.0.0.0 vpn_gateway nobind float persist-tun
persist-tun also enables pre resolving to avoid DNS resolve problem

preresolve
Custom configuration options
You are on your on own here :)
These options found in the config file do not map to config settings:

ns-cert-type server resolv-retry infinite keepalive 15 60

Plex Server IP - 192.168.1.3

Client Log

2016-02-22 14:21:44 official build 0.6.47 running on samsung SM-N910W8 (APQ8084), Android 5.1.1 (LMY47X) API 22, ABI armeabi-v7a, (samsung/trltecan/trltecan:5.1.1/LMY47X/N910W8VLU1COK3:user/release-keys)
2016-02-22 14:21:44 Building configuration???
2016-02-22 14:21:44 started Socket Thread
2016-02-22 14:21:44 Network Status: not connected
2016-02-22 14:21:44 Current Parameter Settings:
2016-02-22 14:21:44   config = '/data/data/de.blinkt.openvpn/cache/android.conf'
2016-02-22 14:21:44   mode = 0
2016-02-22 14:21:44   show_ciphers = DISABLED
2016-02-22 14:21:44   show_digests = DISABLED
2016-02-22 14:21:44   show_engines = DISABLED
2016-02-22 14:21:44   genkey = DISABLED
2016-02-22 14:21:44   key_pass_file = '[UNDEF]'
2016-02-22 14:21:44   show_tls_ciphers = DISABLED
2016-02-22 14:21:44   connect_retry_max = 0
2016-02-22 14:21:44 Connection profiles [0]:
2016-02-22 14:21:44   proto = tcp-client
2016-02-22 14:21:44   local = '[UNDEF]'
2016-02-22 14:21:44   local_port = '[UNDEF]'
2016-02-22 14:21:44   remote = 'sbhidden.ddns.net'
2016-02-22 14:21:44   remote_port = '443'
2016-02-22 14:21:44   remote_float = ENABLED
2016-02-22 14:21:44   bind_defined = DISABLED
2016-02-22 14:21:44   bind_local = DISABLED
2016-02-22 14:21:44   bind_ipv6_only = DISABLED
2016-02-22 14:21:44   connect_retry_seconds = 5
2016-02-22 14:21:44   connect_timeout = 120
2016-02-22 14:21:44   socks_proxy_server = '[UNDEF]'
2016-02-22 14:21:44   socks_proxy_port = '[UNDEF]'
2016-02-22 14:21:44   socks_proxy_retry = DISABLED
2016-02-22 14:21:44   tun_mtu = 1500
2016-02-22 14:21:44   tun_mtu_defined = ENABLED
2016-02-22 14:21:44   link_mtu = 1500
2016-02-22 14:21:44   link_mtu_defined = DISABLED
2016-02-22 14:21:44   tun_mtu_extra = 0
2016-02-22 14:21:44   tun_mtu_extra_defined = DISABLED
2016-02-22 14:21:44   mtu_discover_type = -1
2016-02-22 14:21:44   fragment = 0
2016-02-22 14:21:44   mssfix = 1450
2016-02-22 14:21:44   explicit_exit_notification = 0
2016-02-22 14:21:44 Connection profiles END
2016-02-22 14:21:44   remote_random = DISABLED
2016-02-22 14:21:44   ipchange = '[UNDEF]'
2016-02-22 14:21:44   dev = 'tun'
2016-02-22 14:21:44   dev_type = '[UNDEF]'
2016-02-22 14:21:44   dev_node = '[UNDEF]'
2016-02-22 14:21:44   lladdr = '[UNDEF]'
2016-02-22 14:21:44   topology = 1
2016-02-22 14:21:44   tun_ipv6 = DISABLED
2016-02-22 14:21:44   ifconfig_local = '[UNDEF]'
2016-02-22 14:21:44   ifconfig_remote_netmask = '[UNDEF]'
2016-02-22 14:21:44   ifconfig_noexec = DISABLED
2016-02-22 14:21:44   ifconfig_nowarn = ENABLED
2016-02-22 14:21:44   ifconfig_ipv6_local = '[UNDEF]'
2016-02-22 14:21:44   ifconfig_ipv6_netbits = 0
2016-02-22 14:21:44   ifconfig_ipv6_remote = '[UNDEF]'
2016-02-22 14:21:44   shaper = 0
2016-02-22 14:21:44   mtu_test = 0
2016-02-22 14:21:44   mlock = DISABLED
2016-02-22 14:21:44   keepalive_ping = 15
2016-02-22 14:21:44   keepalive_timeout = 60
2016-02-22 14:21:44   inactivity_timeout = 0
2016-02-22 14:21:44   ping_send_timeout = 15
2016-02-22 14:21:44   ping_rec_timeout = 60
2016-02-22 14:21:44   ping_rec_timeout_action = 2
2016-02-22 14:21:44   ping_timer_remote = DISABLED
2016-02-22 14:21:44   remap_sigusr1 = 0
2016-02-22 14:21:44   persist_tun = ENABLED
2016-02-22 14:21:44   persist_local_ip = DISABLED
2016-02-22 14:21:44   persist_remote_ip = DISABLED
2016-02-22 14:21:44   persist_key = DISABLED
2016-02-22 14:21:44   passtos = DISABLED
2016-02-22 14:21:44   resolve_retry_seconds = 1000000000
2016-02-22 14:21:44   resolve_in_advance = ENABLED
2016-02-22 14:21:44   username = '[UNDEF]'
2016-02-22 14:21:44   groupname = '[UNDEF]'
2016-02-22 14:21:44   chroot_dir = '[UNDEF]'
2016-02-22 14:21:44   cd_dir = '[UNDEF]'
2016-02-22 14:21:44   writepid = '[UNDEF]'
2016-02-22 14:21:44   up_script = '[UNDEF]'
2016-02-22 14:21:44   down_script = '[UNDEF]'
2016-02-22 14:21:44   down_pre = DISABLED
2016-02-22 14:21:44   up_restart = DISABLED
2016-02-22 14:21:44   up_delay = DISABLED
2016-02-22 14:21:44   daemon = DISABLED
2016-02-22 14:21:44   inetd = 0
2016-02-22 14:21:44   log = DISABLED
2016-02-22 14:21:44   suppress_timestamps = DISABLED
2016-02-22 14:21:44   machine_readable_output = ENABLED
2016-02-22 14:21:44   nice = 0
2016-02-22 14:21:44   verbosity = 4
2016-02-22 14:21:44   mute = 0
2016-02-22 14:21:44   gremlin = 0
2016-02-22 14:21:44   status_file = '[UNDEF]'
2016-02-22 14:21:44   status_file_version = 1
2016-02-22 14:21:44   status_file_update_freq = 60
2016-02-22 14:21:44   occ = ENABLED
2016-02-22 14:21:44   rcvbuf = 0
2016-02-22 14:21:44   sndbuf = 0
2016-02-22 14:21:44   sockflags = 0
2016-02-22 14:21:44   fast_io = DISABLED
2016-02-22 14:21:44   comp.alg = 2
2016-02-22 14:21:44   comp.flags = 1
2016-02-22 14:21:44   route_script = '[UNDEF]'
2016-02-22 14:21:44   route_default_gateway = '[UNDEF]'
2016-02-22 14:21:44   route_default_metric = 0
2016-02-22 14:21:44   route_noexec = DISABLED
2016-02-22 14:21:44   route_delay = 0
2016-02-22 14:21:44   route_delay_window = 30
2016-02-22 14:21:44   route_delay_defined = DISABLED
2016-02-22 14:21:44   route_nopull = DISABLED
2016-02-22 14:21:44   route_gateway_via_dhcp = DISABLED
2016-02-22 14:21:44   allow_pull_fqdn = DISABLED
2016-02-22 14:21:44   route 0.0.0.0/0.0.0.0/vpn_gateway/nil
2016-02-22 14:21:44   management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'
2016-02-22 14:21:44   management_port = 'unix'
2016-02-22 14:21:44   management_user_pass = '[UNDEF]'
2016-02-22 14:21:44   management_log_history_cache = 250
2016-02-22 14:21:44   management_echo_buffer_size = 100
2016-02-22 14:21:44   management_write_peer_info_file = '[UNDEF]'
2016-02-22 14:21:44   management_client_user = '[UNDEF]'
2016-02-22 14:21:44   management_client_group = '[UNDEF]'
2016-02-22 14:21:44   management_flags = 294
2016-02-22 14:21:44   shared_secret_file = '[UNDEF]'
2016-02-22 14:21:44   key_direction = 0
2016-02-22 14:21:44   ciphername_defined = ENABLED
2016-02-22 14:21:44   ciphername = 'BF-CBC'
2016-02-22 14:21:44   authname_defined = ENABLED
2016-02-22 14:21:44   authname = 'SHA1'
2016-02-22 14:21:44   prng_hash = 'SHA1'
2016-02-22 14:21:44   prng_nonce_secret_len = 16
2016-02-22 14:21:44   keysize = 0
2016-02-22 14:21:44   engine = DISABLED
2016-02-22 14:21:44   replay = ENABLED
2016-02-22 14:21:44   mute_replay_warnings = DISABLED
2016-02-22 14:21:44   replay_window = 64
2016-02-22 14:21:44   replay_time = 15
2016-02-22 14:21:44   packet_id_file = '[UNDEF]'
2016-02-22 14:21:44   use_iv = ENABLED
2016-02-22 14:21:44   test_crypto = DISABLED
2016-02-22 14:21:44   tls_server = DISABLED
2016-02-22 14:21:44   tls_client = ENABLED
2016-02-22 14:21:44   key_method = 2
2016-02-22 14:21:44   ca_file = '[[INLINE]]'
2016-02-22 14:21:44   ca_path = '[UNDEF]'
2016-02-22 14:21:44   dh_file = '[UNDEF]'
2016-02-22 14:21:44   cert_file = '[[INLINE]]'
2016-02-22 14:21:44   extra_certs_file = '[UNDEF]'
2016-02-22 14:21:44   priv_key_file = '[[INLINE]]'
2016-02-22 14:21:44   pkcs12_file = '[UNDEF]'
2016-02-22 14:21:44   cipher_list = '[UNDEF]'
2016-02-22 14:21:44   tls_verify = '[UNDEF]'
2016-02-22 14:21:44   tls_export_cert = '[UNDEF]'
2016-02-22 14:21:44   verify_x509_type = 0
2016-02-22 14:21:44   verify_x509_name = '[UNDEF]'
2016-02-22 14:21:44   crl_file = '[UNDEF]'
2016-02-22 14:21:44   ns_cert_type = 1
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_ku[i] = 0
2016-02-22 14:21:44   remote_cert_eku = '[UNDEF]'
2016-02-22 14:21:44   ssl_flags = 0
2016-02-22 14:21:44   tls_timeout = 2
2016-02-22 14:21:44   renegotiate_bytes = 0
2016-02-22 14:21:44   renegotiate_packets = 0
2016-02-22 14:21:44   renegotiate_seconds = 3600
2016-02-22 14:21:44   handshake_window = 60
2016-02-22 14:21:44   transition_window = 3600
2016-02-22 14:21:44   single_session = DISABLED
2016-02-22 14:21:44   push_peer_info = DISABLED
2016-02-22 14:21:44   tls_exit = DISABLED
2016-02-22 14:21:44   tls_auth_file = '[UNDEF]'
2016-02-22 14:21:44   client = ENABLED
2016-02-22 14:21:44   pull = ENABLED
2016-02-22 14:21:44   auth_user_pass_file = 'stdin'
2016-02-22 14:21:44 OpenVPN 2.4-icsopenvpn [git:icsopenvpn-c75f06c933a596fb] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH] [IPv6] built on Feb 10 2016
2016-02-22 14:21:44 library versions: OpenSSL 1.0.2f  28 Jan 2016, LZO 2.09
2016-02-22 14:21:44 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2016-02-22 14:21:59 MANAGEMENT: CMD 'hold release'
2016-02-22 14:21:59 MANAGEMENT: CMD 'username 'Auth' admin'
2016-02-22 14:21:59 MANAGEMENT: CMD 'bytecount 2'
2016-02-22 14:21:59 MANAGEMENT: CMD 'password [...]'
2016-02-22 14:21:59 LZO compression initializing
2016-02-22 14:21:59 Control Channel MTU parms [ L:1544 D:1210 EF:40 EB:0 ET:0 EL:3 ]
2016-02-22 14:21:59 Data Channel MTU parms [ L:1544 D:1450 EF:44 EB:393 ET:0 EL:3 ]
2016-02-22 14:21:59 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2016-02-22 14:21:59 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1544,tun-mtu 1500,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2016-02-22 14:21:59 TCP/UDP: Preserving recently used remote address: [AF_INET]<snip>
2016-02-22 14:21:59 Socket Buffers: R=[4194304->4194304] S=[3145728->3145728]
2016-02-22 14:21:59 Attempting to establish TCP connection with [AF_INET]<snip> [nonblock]
2016-02-22 14:21:59 MANAGEMENT: CMD 'state on'
2016-02-22 14:21:59 Network Status: CONNECTED LTE to MOBILE ltemobile.apn
2016-02-22 14:21:59 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2016-02-22 14:22:00 TCP connection established with [AF_INET]<snip>
2016-02-22 14:22:00 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2016-02-22 14:22:00 TCP_CLIENT link local: (not bound)
2016-02-22 14:22:00 TCP_CLIENT link remote: [AF_INET]<snip>
2016-02-22 14:22:00 MANAGEMENT: >STATE:1456172520,WAIT,,,,,,
2016-02-22 14:22:01 MANAGEMENT: >STATE:1456172521,AUTH,,,,,,
2016-02-22 14:22:01 TLS: Initial packet from [AF_INET]<snip>, sid=9cb5021a 5c885e8b
2016-02-22 14:22:01 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2016-02-22 14:22:03 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U, emailAddress=me@myhost.mydomain
2016-02-22 14:22:03 VERIFY OK: nsCertType=SERVER
2016-02-22 14:22:03 VERIFY OK: depth=0, C=TW, ST=TW, L=Taipei, O=ASUS, CN=RT-AC66U, emailAddress=me@myhost.mydomain
2016-02-22 14:22:05 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2016-02-22 14:22:05 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2016-02-22 14:22:05 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2016-02-22 14:22:05 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2016-02-22 14:22:05 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
2016-02-22 14:22:05 [RT-AC66U] Peer Connection Initiated with [AF_INET]<snip>
2016-02-22 14:22:06 MANAGEMENT: >STATE:1456172526,GET_CONFIG,,,,,,
2016-02-22 14:22:06 SENT CONTROL [RT-AC66U]: 'PUSH_REQUEST' (status=1)
2016-02-22 14:22:06 PUSH: Received control message: 'PUSH_REPLY,route 192.168.1.0 255.255.255.0,dhcp-option DNS 192.168.1.1,redirect-gateway def1,route 192.168.1.3 255.255.255.255,route 192.168.1.6 255.255.255.255,route 10.8.0.1,topology net30,ping 15,ping-restart 60,ifconfig 10.8.0.10 10.8.0.9'
2016-02-22 14:22:06 OPTIONS IMPORT: timers and/or timeouts modified
2016-02-22 14:22:06 OPTIONS IMPORT: --ifconfig/up options modified
2016-02-22 14:22:06 OPTIONS IMPORT: route options modified
2016-02-22 14:22:06 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2016-02-22 14:22:06 ROUTE_GATEWAY 127.100.103.119/255.0.0.0 IFACE=lo HWADDR=00:00:00:00:00:00
2016-02-22 14:22:06 GDG6: remote_host_ipv6=n/a
2016-02-22 14:22:06 ROUTE6: default_gateway=UNDEF
2016-02-22 14:22:06 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options
2016-02-22 14:22:06 OpenVPN ROUTE: failed to parse/resolve route for host/network: ::/0
2016-02-22 14:22:06 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2016-02-22 14:22:06 MANAGEMENT: >STATE:1456172526,ASSIGN_IP,,10.8.0.10,,,,
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: >STATE:1456172526,ADD_ROUTES,,,,,,
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2016-02-22 14:22:06 Opening tun interface:
2016-02-22 14:22:06 Local IPv4: 10.8.0.10/30 IPv6: null MTU: 1500
2016-02-22 14:22:06 DNS Server: 192.168.1.1, Domain: null
2016-02-22 14:22:06 Routes: 0.0.0.0/0, 10.8.0.1/32, 10.8.0.8/30, 192.168.1.0/24, 192.168.1.3/32, 192.168.1.6/32 
2016-02-22 14:22:06 Routes excluded:  
2016-02-22 14:22:06 VpnService routes installed: 0.0.0.0/0 
2016-02-22 14:22:06 Disallowed VPN apps: 
2016-02-22 14:22:06 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2016-02-22 14:22:06 Initialization Sequence Completed
2016-02-22 14:22:06 MANAGEMENT: >STATE:1456172526,CONNECTED,SUCCESS,10.8.0.10,<snip>,443,25.89.89.81,32810

Can someone please tell me why I cannot see my vm plex server? >.< I've spent a few days working on this.....

Thank you for your time :-)

Traffic

sbmotoracer wrote I can ping my main os that is running virtualbox and my windows vm but not my plex linux vm.

Can your plex linux vm ping your VPN server IP 10.8.0.1 ?

sbmotoracer

Traffic wrote
sbmotoracer wrote I can ping my main os that is running virtualbox and my windows vm but not my plex linux vm.
Can your plex linux vm ping your VPN server IP 10.8.0.1 ?

traceroute to 10.8.0.1 (10.8.0.1), 64 hops max
1 10.8.0.1 0.001ms 0.002ms 0.001ms

PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=0.027 ms
64 bytes from 10.8.0.1: icmp_seq=2 ttl=64 time=0.035 ms
64 bytes from 10.8.0.1: icmp_seq=3 ttl=64 time=0.029 ms
64 bytes from 10.8.0.1: icmp_seq=4 ttl=64 time=0.053 ms
64 bytes from 10.8.0.1: icmp_seq=5 ttl=64 time=0.037 ms
64 bytes from 10.8.0.1: icmp_seq=6 ttl=64 time=0.034 ms
^C
--- 10.8.0.1 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5002ms
rtt min/avg/max/mdev = 0.027/0.035/0.053/0.011 ms

If my client (my phone) is wirelessly connected to my router, I can see the plex vm perfectly fine. If i'm anywhere else then I can't reach it.

Traffic

Please read this:
HOWTO: Expanding the scope of the VPN to include additional machines

sbmotoracer

Traffic wrotePlease read this:
HOWTO: Expanding the scope of the VPN to include additional machines

I've read it a few times now.

push "redirect-gateway def1" push "route 192.168.1.3 255.255.255.255" push "route 192.168.1.6 255.255.255.255" push "dhcp-option DNS 192.168.1.1"

"Next, you must set up a route on the server-side LAN gateway to route the VPN client subnet (10.8.0.0/24) to the OpenVPN server (this is only necessary if the OpenVPN server and the LAN gateway are different machines)."

The router that is running openvpn, is also the gateway for all of my vms.

Traffic

You could use --topology subnet .. it is a little easier to tame ..

Also,

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet. f.e 192.168.143.0/24

sbmotoracer

Sorry, I didn't respond sooner. Its been a crazy week at work...

I switched the local subnet address to 192.168.143.0, with no change in connection to the plex server.

Based on what you can see from my prev posts is there anything that would be blocking it or is mis-configured? I don't believe so but considering i'm new at this, i'm sure there might be.

My client can't ping the the plex server but I can access the router through the main ip. The router can ping both the client and the server.