hello i have an openvpn setup up and running. server runs on raspbian in paris while i'm connecting from different clients from lisbon. when i test my ip from any external website they say i'm in paris. great ! on my local computer running windows 10 though i can't access the remote router on 192.168.1.1. it always shows my local router. (and does the same for any local ip address) on a local android device using openvpn client i have an option called "Bypass VPN for local networks" in the routing options, and unchecking it gives me the ability to access the remote router through 192.168.1.1 so i guess i have to change something on the windows 10 side but i don't know what. here is the config for the server : [oconf=Server Config]port ***** proto udp dev tun ca ca.crt cert server.crt key server.key dh dh1024.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3 # add up and down script for uPNP script-security 2 up /etc/openvpn/tunnel.up down /etc/openvpn/tunnel.down[/oconf] and the client on windows 10 : [oconf=Client Config]client dev tun proto udp remote ******** ***** resolv-retry infinite nobind persist-key persist-tun ca pi/ca.crt cert pi/client1.crt key pi/client1.key ns-cert-type server comp-lzo verb 4 route-method exe route-delay 2[/oconf] thanks for any help !

[quote="TiTex"]you should stop using 192.168.1.0/24 network on your LAN's :)[/quote]Indeed. [list]NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create [b]routing conflicts[/b] if you connect to the VPN server from public locations such as internet cafes that use the same subnet.[/list] :arrow: [u]Never[/u] use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!: [list]You are advised to change your server LAN to a more unique [url=http://en.wikipedia.org/wiki/Private_network]RFC1918[/url] compliant subnet. For example: 192.168.143.0/24[/list] [quote="krodelabestiole"]on a local android device using openvpn client i have an option called "Bypass VPN for local networks" so i guess i have to change something on the windows 10 side but i don't know what[/quote]Change this: [quote="krodelabestiole"][oconf=server]push "redirect-gateway def1"[/oconf][/quote]to: [oconf=server]push "redirect-gateway def1 block-local"[/oconf]Using this options means you do not [i]need[/i] to change your server LAN but it is still recommended that you do change it.

[quote="TiTex"]you should stop using 192.168.1.0/24 network on your LAN's :)[/quote] thanks for the advice. right now it sounds a bit complicated considering all the services involved, but i will definitely think about it. [quote="TinCanTech"]Change this: [oconf=server]push "redirect-gateway def1"[/oconf]to: [oconf=server]push "redirect-gateway def1 block-local"[/oconf][/quote] I did it and restarted openVPN daemon but it doesn't seem to change anything. BTW I don't understand why I'm able to access the remote router with android and not windows... Thanks a lot anyway for trying to help !

can't tunnel local ips

krodelabestiole

hello

i have an openvpn setup up and running. server runs on raspbian in paris while i'm connecting from different clients from lisbon.
when i test my ip from any external website they say i'm in paris. great !

on my local computer running windows 10 though i can't access the remote router on 192.168.1.1. it always shows my local router. (and does the same for any local ip address)

on a local android device using openvpn client i have an option called "Bypass VPN for local networks" in the routing options, and unchecking it gives me the ability to access the remote router through 192.168.1.1

so i guess i have to change something on the windows 10 side but i don't know what.

here is the config for the server : port *****
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
# add up and down script for uPNP
script-security 2
up /etc/openvpn/tunnel.up
down /etc/openvpn/tunnel.down and the client on windows 10 : client
dev tun
proto udp
remote ******** *****
resolv-retry infinite
nobind
persist-key
persist-tun
ca pi/ca.crt
cert pi/client1.crt
key pi/client1.key
ns-cert-type server
comp-lzo
verb 4
route-method exe
route-delay 2 thanks for any help !

TiTex

you should stop using 192.168.1.0/24 network on your LAN's 🙂

TinCanTech

TiTex wroteyou should stop using 192.168.1.0/24 network on your LAN's 🙂

Indeed.

NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.

:arrow: Never use 192.168.0.0/24 or 192.168.1.0/24 (or other common subnets) for your OpenVPN Server LAN :!:

You are advised to change your server LAN to a more unique RFC1918 compliant subnet.
For example: 192.168.143.0/24

krodelabestiole wroteon a local android device using openvpn client i have an option called "Bypass VPN for local networks"

so i guess i have to change something on the windows 10 side but i don't know what

Change this:

krodelabestiole wrotepush "redirect-gateway def1"

to: push "redirect-gateway def1 block-local"Using this options means you do not need to change your server LAN but it is still recommended that you do change it.

krodelabestiole

TiTex wroteyou should stop using 192.168.1.0/24 network on your LAN's 🙂

thanks for the advice. right now it sounds a bit complicated considering all the services involved, but i will definitely think about it.

TinCanTech wroteChange this: push "redirect-gateway def1"to: push "redirect-gateway def1 block-local"

I did it and restarted openVPN daemon but it doesn't seem to change anything.

BTW I don't understand why I'm able to access the remote router with android and not windows...

Thanks a lot anyway for trying to help !