Hi,
I want to make a raspberry located in my local lan accessible from the internet via a VPN connection.
I have / want to have the following construction:
I have a VPS server @NetCup with a OpenVPN Server on it.
Thus works perfect! I can connect with a client to it and I have internet through this connection.
Now I connect my notebook (located in the internet) and my raspberry (located on my private LAN @ home) to this OpenVPN server.
I these client can "ping" each other, but my notebook can´t reach the webserver of the raspberry (on Port 8083).
Here is my server configuration (so Port 8083 listen on all interfaces):
[oconf]
proto udp
port 12345
dev tun
topology subnet
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-config-dir ccd
client-to-client
keepalive 10 120
tls-auth ta.key 0
key-direction 0
cipher AES-256-CBC
auth SHA512
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
comp-lzo
user openvpn
group openvpn
persist-key
persist-tun
status openvpn-status.log
verb 3
script-security 2
client-connect openvpn_client-connect.sh
;learn-address ndp-proxy-setup.sh
[/oconf]
And here the netstat output from my raspberry:
raspberry:~ $ netstat -tuplen
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 0.0.0.0:8083 0.0.0.0:* LISTEN 999 7114 -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 80261 -
tcp 0 0 0.0.0.0:7072 0.0.0.0:* LISTEN 999 7116 -
udp 0 0 0.0.0.0:68 0.0.0.0:* 0 9672 -
udp6 0 0 :::546 :::* 0 10747 -
Somebody an idea? Do I have to make a Portfowarding on my local Router (OpenWRT)? IF so, which IP address do I have to forward?
Thanks