OpenVPN DNS Issues - Hostnames

windswept321

I have managed to set up a openvpn server and client between two LEDE routers.
I can connect via device IP address but not by hostname. Hostnames resolve ok when connected using the same credentials on my Mac with Viscosity.
This is for connection to remote servers so only some traffic is routed over the vpn.

Can someone help me with this issue please?

My configuration is as follows, including attempts to get hostnames to resolve:

server (192.168.0.1)

config openvpn ‘server’
option enabled '1'
option dev 'tun'
option port '1194'
option proto 'udp'
option comp_lzo 'yes'
option status '/var/log/openvpn_status.log'
option log '/tmp/openvpn.log'
option mute '5'
option keepalive '10 120'
option persist_key '1'
option persist_tun '1'
option user 'nobody'
option group 'nogroup'
option mode 'server'
option tls_server '1'
option server '10.8.0.0 255.255.255.0'
option topology 'subnet'
option route_gateway 'dhcp'
option client_to_client '1'
list push 'comp-lzo yes'
list push 'persist-key'
list push 'persist-tun'
list push 'user nobody'
list push 'user nogroup'
list push 'topology subnet'
list push 'route-gateway dhcp'
list push 'route 10.10.1.0 255.255.255.0'
list push 'route 192.168.0.0 255.255.255.0'
list push 'dhcp-option DNS 192.168.0.1'
list push 'dhcp-option DOMAIN .ddd'
option verb '4'
option ca '/etc/luci-uploads/cbid.openvpn.myvpn.ca'
option dh '/etc/luci-uploads/cbid.openvpn.myvpn.dh'
option cert '/etc/luci-uploads/cbid.openvpn.myvpn.cert'
option key '/etc/luci-uploads/cbid.openvpn.myvpn.key'

client (192.168.1.1)

config openvpn ‘client’
option float '1'
option client '1'
option tls_client '1'
option remote_cert_tls 'server'
option comp_lzo 'yes'
option dev 'tun'
option proto 'udp'
option resolv_retry 'infinite'
option reneg_sec '0'
option persist_key '1'
option persist_tun '1'
option nobind '1'
list remote ‘DDNSSERVICE 1194'
option cert '/etc/luci-uploads/cbid.openvpn.cert'
option key '/etc/luci-uploads/cbid.openvpn.key'
option tls-auth '/etc/luci-uploads/openvpn.ta.key'
option enable '1'
option ca '/etc/luci-uploads/cbid.openvpn.ca'
option enabled '1'
option dh '/etc/luci-uploads/cbid.openvpn.dh'
option verb '3'
option dhcp_option 'DOMAIN .ddd'

TinCanTech

windswept321 wrote I can connect via device IP address but not by hostname

Presumably, your client log shows that it cannot resolve your remote hostname ?

windswept321

I don't see anything in the logs.
My testing went as far as trying to visit a configuration page, ssh and pinging, all of which work when connecting via an openvpn client on my laptop or with ip address using the LEDE client connection.

ping: bad address...

TinCanTech

You need to make sure your router has access to a working DNS server, like google's 8.8.8.8

windswept321

It does, this is a local network hostname. Internet connectivity is fine.
Sorry for not making that clear.

TinCanTech

windswept321 wrote I have managed to set up a openvpn server and client between two LEDE routers.
I can connect via device IP address but not by hostname

Sorry, you need to read OpenWRT/LEDE documentation to learn how your router sets and uses DNS.