Openvpn config

svenb1984

Hi!

I tried now for about 120 minuted and decided to seek help. I guess my questions are stupid and not too difficult.

I installed openvpn in a virtual machine (ubuntu 18.04, all updates) on my esxi server. The openvpn server has the IP 192.168.100.68 / 255.255.255.0

I created keys for a client (iphone) and the connection from 4G network to my openvpn server is working. The assigned IP address on that client is 10.8.0.6 etc.

I added the static ipv4 route 10.8.0.0 / subnet 255.255.255.0 / gateway 10.8.0.1 to my fritz box.

server.conf:
push "route 192.168.100.0 255.255.255.0"

I can't access any local server from my iphone. I guess I'm missing some routes... I tried a little with iptables but could not solve it.

Can somebody support me?

More information:
Gateway (fritz box) 192.168.100.1

root@svenvpn:/home/sven# ifconfig
ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.100.68 netmask 255.255.255.0 broadcast 192.168.100.255
inet6 fe80::20c:29ff:fee6:67c prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:e6:06:7c txqueuelen 1000 (Ethernet)
RX packets 1605 bytes 169980 (169.9 KB)
RX errors 0 dropped 96 overruns 0 frame 0
TX packets 879 bytes 248140 (248.1 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 90 bytes 6692 (6.6 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 90 bytes 6692 (6.6 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2
inet6 fe80::6217:f43d:f151:935c prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 47 bytes 3408 (3.4 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 18 bytes 1224 (1.2 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

Target #1: I can access any local server from my iphone and future further clients
Target #2: All traffic is routed from the client via the vpn server

svenb1984

50 eur/usd for a working solution incl. internet 🙂

TinCanTech

svenb1984 wrote 50 eur/usd for a working solution incl. internet 🙂

I'll take you up on that offer.

svenb1984 wrote I added the static ipv4 route 10.8.0.0 / subnet 255.255.255.0 / gateway 10.8.0.1 to my fritz box.

That is wrong ..

Gateway should be: 192.168.100.68