Hi, I'm a total VPN noob so I apologize in advance for my stupid question(s) I have a RT-AC66R I set up OpenVPN on my router. I am able to connect to it from another computer outside the network, however, I have an issue. My local network where the openVPN server is running on the router has an ip of 192.168.x.x When I connect to the network from another location, I get a n IP of 10.8.x.x With that IP I can't access any of the resources on that network. I tried to change the VPN subnet but it can't be the same as my local network. How can I get OpenVPN to give me a local IP when I connect to it? I'm just trying to get access to the network so I can use windows remote desktop to connect to PCs on the network. Thanks for your help!

First of you could do that with TAP adapter instead of tun, however i strongly object that for various reasons with tun you make a rounting network which means you have your lan like 192.168.0.x you have your openvpn server network like 10.10.10.x now any client connecting to openvpn gets the 10.10.10.x adress no big deal you just route to your home network. place in serverconfig [code] push route 192.168.0.0 255.255.255.0 route 10.10.10.0 255.255.255.0 [/code] that will tell the router to defautl route anything for openvpn network to openvpn and it will push the route to your local network to the client since all your local lan client have the asus as their default gateway they will always go to asus first in attemp to reach the 10.. network. asus now knows where to put it because openvpn create an own virtual adapter on the router and with the route command it adds the adapter to the routing table of asus. so he will know next hop for 10xxx network is that virtual adapter same other way around. with pushing route to 192 to the client he now has 3 routes one is default gateway one is 10x and one is 192.... he will try for anythign other then inthe routing tabel to reach defautl gateway so all 10x and 192x adressed request will go to the virtual adapter of openvpn and redirector to the openvpn server who will redirect it to the router

Thank you so much for your answer! I understand a little bit from reading that TUN is preferred over TAP in some cases. Basically, I'm just trying to get on my network so I can access the workstations via tightVNC viewer. I had been trying the set up via TUN settings but it didn't work. It only occured to me that Asus had a TAP option. Once I set that, everything worked. However, do you think I should try to get TUN to work? I know you said you strongly object to TAP My concern is just to be as safe as possible when accessing workstations via TighVNC.

definetly go and make tun work the 2 lines config should do the trick tun is actually pretty easy, even tap SEEMS easier at start. Tap is a real problem in my view.tap is a bridge, that means that it is indeed like you connect a local workstation ot your network. however this brings many problems with it. with bridging you get all the beautiful ethernet traffic, not only IP but everything. this brings problems. from slowing down the vpn with garbage till issues on your switches (depending what you have) not to mention all the broadcastyou dont want or need. routing is much cleaner and has some additional benefits which might not important for you right now but for example the real problem arrive once your vpn connetion runs over bad lines, it can easly addup fragementation, it can make problems in your lan with fragmented packages from your vpn line and so on. TAP is really a speciall purpose thing if you really know WHY you want it. if you dont have a reason other than i cant get tun to work then dont. beside tap adapter have notorious issues driver wise. go for tun and learn a thing or 2 about routing, youll need it at somepoint anyway.

Ok. I'll def try to make it work later this evening. Appreciate the help! One last thing: My settings will look like this with your two lines in the little box at the bottom? [img]http://i65.tinypic.com/5466x5.jpg[/img]

im not really familiar with asus implementation of that interface. in theory you may nto even need those options since the menue said push local lan to the client so it should work out of the box but if you need to set it you need to set [code]route 10.8.0.0 255.255.255.0[/code] but highly possibel asus does that, you may wanna check your routing table after vpn server is started it should show you the 10.8.0.0 network on that tun adapter i would activate extra hmac authentication it would also be interresting what it means with manage client specific settings. btw, if you use a tun adapter you NEED to execute the openvpn client with administrator rights. otherweise it can set your routes you need in windows. if it doenst work make a [code]netstat -r [/code] on your client plus a traceroute to your router and vice versa and post results

I have tried to follow the instructions given here, but it is not working to set up my Asus RT-N66U router. When I apply the settings on the router, I get the following error message: Routing conflict! Please check the client's IP address settings from the Advanced Settings page or check the routing table on System log. The Custom Configuration is set up as follows: push route 192.168.2.0 255.255.255.0 route 10.8.0.0 255.255.255.0 If I change the command from route 10.8.0.0 255.255.255.0 to route 10.8.0.1 255.255.255.0, the router will create the configuration file. However, since this is not how you suggested doing it, I was wondering if this is okay.

I did not end up needing any of those extras. I used the general settings and it worked. I also use it with TightVNC to connect from anywhere.

Hi IcarusVPN, were you able to get your VPN to connect and see your local network computers via TUN? or did you set it up as TAP thanks in advance

Hi, I too am having some problems getting this working properly. I have two ASUS RT AC5300 routers, At different locations. I have an IP Office and two IP phones. I created an OpenVPN tunnel between the two locations by configuring the router where the phones are as a client, and the router with the IP Office as the server. The phones can see the IP Office and register, but no voice traffic (dial-tones or speech) work from the phones. They do work when they are connected locally however. Is there something I need to add to the configuration to get this to work? The main network is 192.168.1.0/24 and the Remote office is 192.168.50.0/24. Here is a screenshot of the serving router's OpenVPN configuration: [img]https://s27.postimg.org/mjijjta9f/myconfig.jpg[/img]

Hey gleckert, did you get it sorted? I've been facing this issue...

OpenVPN On Asus Router

raven66

detalone wrote Hi All,

quick question on OpenVPN server config - kinda related to this thread:
- how to configure advance settings in order to allow traffic to LAN only w/o access to WAN
What I'm trying to achieve is to build tunnel to my home network with external drive plugged onto router for few friends however I'd rather not give them access to internet.
Any ideas?

I know that this is old question, but maybe someone else will be directed here to find similar solution, so I will post this anyway.

Push LAN to clients: YES
it will allow to access shared folders & drives within primary (original) LAN

Direct clients to redirect internet traffic: NO
Remote clients will be using its own connection/WAN for internet (all external IPs & DNS will be from client's machine)

h3nk3t

Hi everyone

I'm using OpenVPN TAP server on my Asus RT-AC86U.

Everything works perfect except one thing.

I can't Connect to the router GUI from LAN to LAN

If I'm using 4g from My cellphone then I'm able to log into Asus router GUI.

But never from WIFI connection from any other location

From both LAN outside my OpenVPN server and 4g cellular I can connect to everything on the servers LAN

Can anyone give me a hint?

--------edit---------

Nothing works LAN to another LAN. Both LAN's using same DHCP spann. 192.168.1.1-192.168.1.254

Is there any solution for that kind of behaviour with OpenVPN TAP???

Thanks

h3nk3t

Nothing works LAN to another LAN. Both LAN's using same DHCP spann. 192.168.1.1-192.168.1.254

Is there any solution for that kind of behaviour with OpenVPN TAP???

Thanks

1-6

OpenVPN Tap should work between routers, a linux box, or a Windows machine with a virtual Tap network interface. Unfortunately, you won't be able to use Tap with iOS or Android. These devices only support Tun. With that in mind here's a cool video on the topic: https://www.youtube.com/watch?v=3DG8iRPsKqQ

Personally, I'm trying to get my two ASUS routers to communicate via Tap (Level 2) between gateways. The client is connecting to the server but I can't get computers on one side of the network to communicate with computers on the other side (SAMBA). Kinda stuck...

h3nk3t

Actually you can use OpenVPN Client from Colucciweb.
And this without root.
And we are talking OpenVPN TAP here

h3nk3t

https://play.google.com/store/apps/details?id=it.colucciweb.openvpn

Geo1983

Hello everybody,
Can anybody help me with a problem?
I have 2 Asus routers: RT-AX88U as a OpenVPN server (TAP) and a RT-AC88U as a OpenVPN client. I need a TAP connection to connect all the TVs from both locations to DLNA server from my NAS.
The VPN connection is working very well but when I connect a Chromecast or a Google Home mini in the client network the Server (RT-AX88U) is rebooting. I tried with more Chromecasts or Google speakers but the same problem. Is something special with this google devices? Can I block them from VPN connection? Unfortunately the entire log is lost when the router is rebooting (I can see only the booting log).
Please help me. Is very annoying to disconnect all the google devices when I want to enable the VPN connection. I'm using firmware 384.17 from Merlin on both routers. With the original Asuswrt firmware I have the same behavior.
Thank you!

gundrted

Hi all,

I have an AX11000 and trying to setup my OpenVPN server. My router has a current firmware load. My client is an iPhone 6s with the latest IOS and latest OpenVPN app. Everything connects fine, but as others have seen is my IP is still using my iPhone's WiFi connection. My router's 'Direct clients to redirect Internet traffic' to Yes. I have tried to set the setting to No and back to Yes. I've also download a new config profile file to my iPhone. My iPhone client is set to use the VPN on 'all' networks.

I'm not concerned about LAN access. I'm just running this to mask my data when using shared WiFi. I've tried to setup my routers IPSec server and that works 'correctly' and masks my IP. My issue with the iPhone's native VPN is it doesn't stay up. If I move from WiFi to cellular, the connection drops. I really like the OpenVPN feature of moving between networks.

I've tried Googling and I'm only coming up with 'Direct clients to redirect Internet traffic'.

Am I missing something?

gundrted

gundrted wrote Hi all,

I have an AX11000 and trying to setup my OpenVPN server. My router has a current firmware load. My client is an iPhone 6s with the latest IOS and latest OpenVPN app. Everything connects fine, but as others have seen is my IP is still using my iPhone's WiFi connection. My router's 'Direct clients to redirect Internet traffic' to Yes. I have tried to set the setting to No and back to Yes. I've also download a new config profile file to my iPhone. My iPhone client is set to use the VPN on 'all' networks.

I'm not concerned about LAN access. I'm just running this to mask my data when using shared WiFi. I've tried to setup my routers IPSec server and that works 'correctly' and masks my IP. My issue with the iPhone's native VPN is it doesn't stay up. If I move from WiFi to cellular, the connection drops. I really like the OpenVPN feature of moving between networks.

I've tried Googling and I'm only coming up with 'Direct clients to redirect Internet traffic'.

Am I missing something?

**Bump**

Astouka1

hello, i really need your help. I have configured an integrated openvpn connection
with Asus ax-1800 (rt-ax56u). My client is an IOS client. I need help to configure my
vpn connection so that it can access my camera recorder which will not have the right to be connected to the internet.
It will connect to the local network with blocked internet access.
What I need to do is make sure that my vpn client can access my camera recorder despite the internet restriction for it.
when i authorize the internet it works but when i block the internet via the asus panel, it no longer works.
I must therefore make a rule to allow my vpn client to access it anyway.
I understood that it is either a static route via my router or a "Push route" ..
I do not really understand and I am not sure of that. how to do? here is some screenshot:
i have guest several port, firewall rules.. but i think i dont understand all...
I DONT USE SERVER (I USE ASUS ROUTER **THIS IS MY SERVER**)
thanks you

« Previous Page