I'm trying to get around my Carrier grade NAT at home. Here's my setup:
http://i.imgur.com/RAGe4PG.png
I installed OpenVPN server on EC2 (EC2-OpenVPN in the diagram) and have my laptop (Remote-Laptop) connected to it successfully. I've verified that my traffic goes out over EC2 instead of my local network. I also have an OpenVPN client on an Ubuntu box at home (Home-Client) and verified that it also connects to the VPN. My goal is to get Remote-Laptop to be able to see Home-NAS via the VPN. Unfortunately, that's not working.
My VPN subnet is 192.168.255.0/24, and my Home network is 192.168.2.0/24.
With everything hooked up, I can ping from Remote-Laptop all the way to the "other side" of Home-Client (i.e. I can "ping 192.168.2.211" successfully). I can't make that last hop over to 192.168.2.193, though.
I feel like it's a problem with the return trip via Home-Router, perhaps, but I'm not sure how to verify that the route is setup correctly since it's an off-the-shelf netgear router with a clunky UI.
Thanks for any help!
From Remote-Laptop:
ifconfig
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 3c:15:c2:c1:3c:10
inet 192.168.43.243 netmask 0xffffff00 broadcast 192.168.43.255
nd6 options=1<PERFORMNUD>
media: autoselect
status: active
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 192.168.255.6 --> 192.168.255.5 netmask 0xffffffff
route -n get 192.168.2.193
route to: 192.168.2.193
destination: 192.168.2.0
mask: 255.255.255.0
gateway: 192.168.255.5
interface: utun0
flags: <UP,GATEWAY,DONE,STATIC,PRCLONING>
recvpipe sendpipe ssthresh rtt,msec rttvar hopcount mtu expire
0 0 0 0 0 0 1500 0
From Home-Server
ifconfig
ens160 Link encap:Ethernet HWaddr 00:0c:29:fb:31:40
inet addr:192.168.2.211 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: 2604:5500:c1a:1f8:b89b:1a99:a822:f81b/64 Scope:Global
inet6 addr: fe80::9078:953c:3cf4:11d2/64 Scope:Link
inet6 addr: 2604:5500:c1a:1f8:8a30:282:4bb0:40ee/64 Scope:Global
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:28469 errors:18 dropped:18 overruns:0 frame:0
TX packets:14429 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:21412513 (21.4 MB) TX bytes:1825496 (1.8 MB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:1510 errors:0 dropped:0 overruns:0 frame:0
TX packets:1510 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:145107 (145.1 KB) TX bytes:145107 (145.1 KB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:192.168.255.10 P-t-P:192.168.255.9 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:961 errors:0 dropped:0 overruns:0 frame:0
TX packets:234 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:125357 (125.3 KB) TX bytes:29140 (29.1 KB)
route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.255.9 128.0.0.0 UG 0 0 0 tun0
0.0.0.0 192.168.2.1 0.0.0.0 UG 100 0 0 ens160
54.165.149.164 192.168.2.1 255.255.255.255 UGH 0 0 0 ens160
128.0.0.0 192.168.255.9 128.0.0.0 UG 0 0 0 tun0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 ens160
192.168.2.0 0.0.0.0 255.255.255.0 U 100 0 0 ens160
192.168.255.0 192.168.255.9 255.255.255.0 UG 0 0 0 tun0
192.168.255.9 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
