Hello and thanks for in advance for any help you can give.
I'm trying to setup my own VPN that connects my secondary router to my OpenVPN Server running on a VPS (Ubuntu 16) hosted with DigitalOcean.
I used various tutorials setting up and i used this script:
https://github.com/Nyr/openvpn-install
After creating the .ovpn file, I downloaded it to my phone and imported it into the OpenVPN app. My phone is connected to my main router and whilst the VPN is turned on within the phone, it has full internet access through it and is 100% connected through the VPN. But when i try to setup the OpenVPN client on my secondary router running DD-WRT (Build 37305) it states 'Client: CONNECTED SUCCESS' but any device i connect to it cannot access any webpages
I tried pinging a website that I've never pinged or visited before and it is able to obtain its IP address but the ping times out, running tracert google.com shows 192.168.2.1 as the first entry but all the rest time out, I can SSH into the server, I can sftp into the server, I can ftp into my unrelated website that is hosted elsewhere.
I've been trying to figure this out for a few hours now with no luck, I'm very new to all this so please bear with me while i figure this out.
Here is the logs and configs:
VPS Syslog available here (IPs removed):
https://tytech.space/download/syslog
DD-WRT VPN Logs:
State
Client: CONNECTED SUCCESS
Local Address: 10.8.0.5
Remote Address: 10.8.0.5
Status
VPN Client Stats
TUN/TAP read bytes 1015
TUN/TAP write bytes 0
TCP/UDP read bytes 3615
TCP/UDP write bytes 5016
Auth read bytes 0
pre-compress bytes 576
post-compress bytes 583
pre-decompress bytes 0
post-decompress bytes 0
Log
Clientlog:
20190226 21:04:13 W WARNING: file '/tmp/openvpncl/client.key' is group or others accessible
20190226 21:04:13 W WARNING: file '/tmp/openvpncl/ta.key' is group or others accessible
20190226 21:04:13 I OpenVPN 2.4.6 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Oct 10 2018
20190226 21:04:13 I library versions: OpenSSL 1.1.1 11 Sep 2018 LZO 2.09
20190226 21:04:13 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:16
20190226 21:04:13 W NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
20190226 21:04:13 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
20190226 21:04:13 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
20190226 21:04:13 I TCP/UDP: Preserving recently used remote address: [AF_INET]68.183.158.15:1196
20190226 21:04:13 Socket Buffers: R=[180224->180224] S=[180224->180224]
20190226 21:04:13 I UDPv4 link local: (not bound)
20190226 21:04:13 I UDPv4 link remote: [AF_INET]68.183.158.15:1196
20190226 21:04:13 TLS: Initial packet from [AF_INET]68.183.158.15:1196 sid=eefc937d 8ef17342
20190226 21:04:13 VERIFY OK: depth=1 CN=ChangeMe
20190226 21:04:13 VERIFY KU OK
20190226 21:04:13 NOTE: --mute triggered...
20190226 21:04:14 4 variation(s) on previous 3 message(s) suppressed by --mute
20190226 21:04:14 W WARNING: 'link-mtu' is used inconsistently local='link-mtu 1558' remote='link-mtu 1557'
20190226 21:04:14 W WARNING: 'comp-lzo' is present in local config but missing in remote config local='comp-lzo'
20190226 21:04:14 Control Channel: TLSv1.2 cipher TLSv1.2 DHE-RSA-AES256-GCM-SHA384 2048 bit RSA
20190226 21:04:14 I [server] Peer Connection Initiated with [AF_INET]68.183.158.15:1196
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 PUSH: Received control message: 'PUSH_REPLY redirect-gateway def1 bypass-dhcp dhcp-option DNS 8.8.8.8 dhcp-option DNS 8.8.4.4 route-gateway 10.8.0.1 topology subnet ping 10 ping-restart 120 ifconfig 10.8.0.5 255.255.255.0'
20190226 21:04:15 OPTIONS IMPORT: timers and/or timeouts modified
20190226 21:04:15 OPTIONS IMPORT: --ifconfig/up options modified
20190226 21:04:15 NOTE: --mute triggered...
20190226 21:04:15 3 variation(s) on previous 3 message(s) suppressed by --mute
20190226 21:04:15 Outgoing Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
20190226 21:04:15 Outgoing Data Channel: Using 160 bit message hash 'SHA1' for HMAC authentication
20190226 21:04:15 Incoming Data Channel: Cipher 'AES-128-CBC' initialized with 128 bit key
20190226 21:04:15 NOTE: --mute triggered...
20190226 21:04:15 1 variation(s) on previous 3 message(s) suppressed by --mute
20190226 21:04:15 I TUN/TAP device tun1 opened
20190226 21:04:15 TUN/TAP TX queue length set to 100
20190226 21:04:15 D do_ifconfig tt->did_ifconfig_ipv6_setup=0
20190226 21:04:15 I /sbin/ifconfig tun1 10.8.0.5 netmask 255.255.255.0 mtu 1500 broadcast 10.8.0.255
20190226 21:04:15 /sbin/route add -net 68.183.158.15 netmask 255.255.255.255 gw 192.168.99.1
20190226 21:04:15 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.1
20190226 21:04:15 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.1
20190226 21:04:15 W WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
20190226 21:04:15 I Initialization Sequence Completed
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'status 2'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'log 500'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'state'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:15 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:15 D MANAGEMENT: CMD 'status 2'
20190226 21:04:15 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'log 500'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'state'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'state'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'state'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'status 2'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:16 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:16 D MANAGEMENT: CMD 'log 500'
20190226 21:04:16 MANAGEMENT: Client disconnected
20190226 21:04:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:17 D MANAGEMENT: CMD 'state'
20190226 21:04:17 MANAGEMENT: Client disconnected
20190226 21:04:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:17 D MANAGEMENT: CMD 'state'
20190226 21:04:17 MANAGEMENT: Client disconnected
20190226 21:04:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:17 D MANAGEMENT: CMD 'state'
20190226 21:04:17 MANAGEMENT: Client disconnected
20190226 21:04:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:17 D MANAGEMENT: CMD 'status 2'
20190226 21:04:17 MANAGEMENT: Client disconnected
20190226 21:04:17 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:16
20190226 21:04:17 D MANAGEMENT: CMD 'log 500'
19691231 18:00:00
OpenVPN Settings in router:
SERVER CONFIG:
port 1196
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA1
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-128-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem
duplicate-cn
CLIENT.OVPN:
client
dev tun
proto udp
sndbuf 0
rcvbuf 0
remote X.X.X.X 1196
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA1
cipher AES-128-CBC
setenv opt block-outside-dns
key-direction 1
verb 3
<ca>
-----BEGIN CERTIFICATE-----
********
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
********
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
********
-----END PRIVATE KEY-----
</key>
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
********
-----END OpenVPN Static key V1-----
</tls-auth>
