OpenVPN - can ping 8.8.8.8, can connect to server VPN but not surf!

10gabry

Goodmorning everyone,
I hope I will not miss anything in the way of writing this urgent problem of mine and that I have been unable to solve with openvpn for days.

I have a vpn server on raspberry which I can connect perfectly from PCs and smartphones.
However from the PC in my office I can't connect correctly. Or rather, I connect, the vpn works (I see the clients in my LAN at home) I see the network resources in the office, ping 8.8.8.8 ok but I don't surf!
I thought it was a DNS problem but even putting the google ip address in the browser (216.58.205.195) doesn't solve it.

I would like that when I connect from the office PC only the traffic towards 192.168.1.0/24 passes into the vpn and all the rest passes with the office settings.
For this I modified the .ovpn file I have in the office, leaving the "redirect-gateway" option active on the server but adding the DNS of my office:192.168.100.30

Can someone give me a hand? I am in crisis without ideas. Thank you

here my .ovpn file for modifications

client
dev tun
proto udp
remote xxxxx.myddns.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_xxxxxxxxxxxxxxxxxx name
cipher AES-256-CBC
auth SHA256
auth-nocache
--pull-filter ignore redirect-gateway
route 192.168.1.0 255.255.255.0
dhcp-option DNS 192.168.100.30
verb 3

TinCanTech

Please see:
https://forums.openvpn.net/viewtopic.php?f=30&t=22603

The Johan

Go to the Admin UI of your Access Server.
Go to VPN Settings.
Disable pushing DNS servers.
Disable rerouting all client Internet traffic through the VPN server.
Enable access to private subnets using NAT, and enter 192.168.1.0/24 there and then save settings and update running servers.

Please note that 192.168.1.0/24 is a very common subnet and this can cause a collision making traffic not able to flow into the VPN adapter.

10gabry

novaflash wrote Go to the Admin UI of your Access Server.
Go to VPN Settings.
Disable pushing DNS servers.
Disable rerouting all client Internet traffic through the VPN server.
Enable access to private subnets using NAT, and enter 192.168.1.0/24 there and then save settings and update running servers.

Please note that 192.168.1.0/24 is a very common subnet and this can cause a collision making traffic not able to flow into the VPN adapter.

Thanks a lot for reply.
I'm gonna change from 192.168.1.0/24 to 192.168.87.0/24
Can you please give me an example of the server.conf file with your settings? I mean, can you give me the correct syntax for the settings you told me?
Thanks again!

The Johan

We're talking about OpenVPN Access Server on this board on this forum, and it does not use a server.conf file, it uses the web based administration user interface instead, and that is operated with the steps I have provided.