Hi All
Sorry for the post, I know there have been
lots of posts on this topic but despite reading them all I am still struggling.
I am not that big a linux user, so please bear with me.
I installed OpenVPN to a RPI3 so that I can use it on my Kindle Fire.
I have it configured and all connecting, initally I was getting a TUN_Error message but I fixed this. Now when I connect it doesn't show any error messages but if I try and access any local network resources or an internal or external website nothing happens.
I have spent the past couple of days trying to fix this, without success. I have tried to uninstall and reinstall but it's made no difference.
local 172.16.0.71
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 172.16.0.234 172.16.0.238
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.1 255.255.255.255"
# Add route to Client routing table for the OPenVPN Subnet
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 172.16.0.71 255.255.255.255"
# Set your primary domain name server address to Google DNS 8.8.8.8
push "dhcp-option DNS 172.16.0.2"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1
firewall-openvpn-rules.sh
#!/bin/sh
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 172.16.0.71
Interfaces
auto lo
iface lo inet loopback
auto eth0
#iface eth0 inet dhcp
iface eth0 inet static
# pre-up /etc/firewall-openvpn-rules.sh
address 172.16.0.71
netmask 255.255.255.0
gateway 172.16.0.2
Yes I know that the Pre-up line is commented out, if I uncomment it then it kills the network completly on the PI.
Any ideas?
