I have installed OpenVPN on my NAS and can connect from several devices. Desired behaviour is to have the complete traffic going through the VPN when not being connected to the same network as the NAS is (e.g. hotel, airport, ...). On IOs (latest Version) I noticed the following: [list] [*] On 3G connection I can connect and everything is fine (internet and internal traffic (behind the VPN) through the tunnel) [*] On WIFI I can connect and internet traffic is running through the tunnel, but internal traffic (behing the VPN) is not going through the tunnel. Same configuration is used.[/list] Is there any additional option to enable? redirect-gateway is set in my config file. Do I need to setup a separate configuration file for WLAN? On Windows 10 I noticed the following: [list] [*] I can connect but I can not access my fritz box router using fritz.box. I can access by using the IP. On a Windows 7 PC with the same configuration access using fritz.box is possible. Both PCs are using a separate internet connection compared to where the VPN NAS is located.[/list] Any ideas here are welcome as well, even though this is not IOS related ;)

[quote="VPNSecure"]On WIFI I can connect and internet traffic is running through the tunnel, but internal traffic (behing the VPN) is not going through the tunnel[/quote]Probably because the client LAN and the server LAN are the same subnet 192.168.0.0/24 so you have a routing conflict.

[list]NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create [b]routing conflicts[/b] if you connect to the VPN server from public locations such as internet cafes that use the same subnet.[/list] :arrow: [u]Never[/u] use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!: [list]You are advised to change your server LAN to a more unique [url=http://en.wikipedia.org/wiki/Private_network]RFC1918[/url] compliant subnet. f.e 192.168.143.0/24[/list]

IP Access Problem on IOs on WLAN

VPNSecure

I have installed OpenVPN on my NAS and can connect from several devices. Desired behaviour is to have the complete traffic going through the VPN when not being connected to the same network as the NAS is (e.g. hotel, airport, ...).

On IOs (latest Version) I noticed the following:

On 3G connection I can connect and everything is fine (internet and internal traffic (behind the VPN) through the tunnel)
On WIFI I can connect and internet traffic is running through the tunnel, but internal traffic (behing the VPN) is not going through the tunnel. Same configuration is used.

Is there any additional option to enable? redirect-gateway is set in my config file. Do I need to setup a separate configuration file for WLAN?

On Windows 10 I noticed the following:

I can connect but I can not access my fritz box router using fritz.box. I can access by using the IP. On a Windows 7 PC with the same configuration access using fritz.box is possible. Both PCs are using a separate internet connection compared to where the VPN NAS is located.

Any ideas here are welcome as well, even though this is not IOS related 😉

TinCanTech

Your home LAN is probably 192.168.0.0/24

VPNSecure

Yes, but what problem does that cause? Isn't it independent from the IP/Subnet?

TinCanTech

VPNSecure wroteOn WIFI I can connect and internet traffic is running through the tunnel, but internal traffic (behing the VPN) is not going through the tunnel

Probably because the client LAN and the server LAN are the same subnet 192.168.0.0/24 so you have a routing conflict.

VPNSecure

In my case above this is true. But IP access to devices works using a Win 10 notebook. It does not work using iOs. (Same OpenVPN configuration). If it was a routing conflict, it should not work on Win10 as well ?

TinCanTech

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet. f.e 192.168.143.0/24

VPNSecure

Actually I think I misunderstood your post above a bit. The OpenVPN is running on 192.168.2.0/24. The LAN is running on 192.168.0.0/24.

But I will change the VPN to 192.168.143.0/24 and see if it helps. Thanks so far.