Hi all, I have my openvpn running and connecting fine from my laptop. Now I want to connect to hosts behind the router from it so I access them by name. I can currently access them by IP address, but that is not good enough as I have many things that depend on hostnames i.e. git. I have a feeling this is a routing issue but I am not a network engineer. Of course I can always add entries in my /etc/hosts file, but that is not very clean. This is the file /etc/config on the router: [code] # created Sat Mar 14 16:02:44 EDT 2020 config openvpn 'Home' option enabled '1' option config '/etc/openvpn/server.conf' [/code] After reading [url]https://openvpn.net/community-resources/how-to/#scope[/url] I tried to add: [code] client-to-client push "route 192.168.1.0 255.255.255.0" push "route 10.13.0.0 255.255.255.0" route 192.168.1.0 255.255.255.0 [/code] But I am not sure where to create the ccd/client2 file as the ccd directory was never created. Here are my files: This file is located at /etc/openvpn on the router [oconf=server.conf] # created Sat Mar 14 16:02:44 EDT 2020 verb 4 user nobody group nogroup dev tun0 port 1194 proto udp server 192.168.1.0 255.255.255.0 topology subnet client-to-client keepalive 10 120 duplicate-cn push "dhcp-option DNS 10.13.0.1" push "redirect-gateway def1" # Uncomment for logging: # log "/tmp/openvpn.log" -----BEGIN DH PARAMETERS----- stuff -----END DH PARAMETERS----- -----BEGIN OpenVPN Static key V1----- stuff -----END OpenVPN Static key V1----- -----BEGIN CERTIFICATE----- stuff -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- stuff -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- stuff -----END PRIVATE KEY----- [/oconf] This is the ovpn file on my laptop [oconf=client.ovpn] # created Sat Mar 14 16:02:44 EDT 2020 verb 4 dev tun nobind client remote my_ip 1194 udp auth-nocache remote-cert-tls server -----BEGIN OpenVPN Static key V1----- stuff -----END OpenVPN Static key V1----- -----BEGIN CERTIFICATE----- stuff -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- stuff -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- stuff -----END PRIVATE KEY----- [/oconf] Any suggestions would be most appreciated!

accessing hosts behind home openwrt router from remote laptop

JordanThompson

Hi all,
I have my openvpn running and connecting fine from my laptop. Now I want to connect to hosts behind the router from it so I access them by name. I can currently access them by IP address, but that is not good enough as I have many things that depend on hostnames i.e. git. I have a feeling this is a routing issue but I am not a network engineer.

Of course I can always add entries in my /etc/hosts file, but that is not very clean.

This is the file /etc/config on the router:

 
# created Sat Mar 14 16:02:44 EDT 2020
config openvpn 'Home'
    option enabled '1'
    option config '/etc/openvpn/server.conf'

After reading https://openvpn.net/community-resources/how-to/#scope I tried to add:

client-to-client
push "route 192.168.1.0 255.255.255.0"
push "route 10.13.0.0 255.255.255.0"
route 192.168.1.0 255.255.255.0

But I am not sure where to create the ccd/client2 file as the ccd directory was never created.

Here are my files:
This file is located at /etc/openvpn on the router

# created Sat Mar 14 16:02:44 EDT 2020
verb 4
user nobody
group nogroup
dev tun0
port 1194
proto udp
server 192.168.1.0 255.255.255.0
topology subnet
client-to-client
keepalive 10 120
duplicate-cn
push "dhcp-option DNS 10.13.0.1"
push "redirect-gateway def1"
# Uncomment for logging:
# log "/tmp/openvpn.log"
<dh>
-----BEGIN DH PARAMETERS-----
stuff
-----END DH PARAMETERS-----
</dh>
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
stuff
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
stuff
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
stuff
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
stuff
-----END PRIVATE KEY-----
</key>

This is the ovpn file on my laptop

# created Sat Mar 14 16:02:44 EDT 2020
verb 4
dev tun
nobind
client
remote my_ip 1194 udp
auth-nocache
remote-cert-tls server
<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
stuff
-----END OpenVPN Static key V1-----
</tls-crypt>
<ca>
-----BEGIN CERTIFICATE-----
stuff
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
stuff
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
stuff
-----END PRIVATE KEY-----
</key>

Any suggestions would be most appreciated!

JordanThompson

I forgot to update the firewall as per the aforementioned web page.
I am using a script to update the router:
echo updating firewall on ${SERVER_IP}
ssh ${SERVER_IP} 'uci rename firewall.@zone[0]="lan" && \
uci rename firewall.@zone[1]="wan" && \
uci rename firewall.@forwarding[0]="lan_wan" && \
uci del_list firewall.lan.device="tun0" && \
uci add_list firewall.lan.device="tun0" && \
uci -q delete firewall.vpn && \
uci set firewall.ovpn="rule" && \
uci set firewall.ovpn.name="Allow-OpenVPN" && \
uci set firewall.ovpn.src="wan" && \
uci set firewall.ovpn.dest_port="1194" && \
uci set firewall.ovpn.proto="udp" && \
uci set firewall.ovpn.target="ACCEPT" && \
uci commit firewall && \
/etc/init.d/firewall restart'

I am NOT using the lines mentioned above:
client-to-client
push "route 192.168.1.0 255.255.255.0"
push "route 10.13.0.0 255.255.255.0"
route 192.168.1.0 255.255.255.0

I can ping and access SOME of my hosts by name and IP, but not others. There doesn't seem to be any rhyme or reason to which hosts respond. I can either ping by both IP and hostname or not at all from my remotely vpn'ed laptop. If I ssh to the router, I can ping by both as expected.

JordanThompson

I updated the firmware on the router, rebooted a few devices, and now everything is performing as expected: I can ping by IP or hostname from my remote laptop