I have set up an OpenVPN server on our local ubuntu server.
vpn server 192.168.178.30
router/dhcp 192.168.178.1
dns 192.168.178.4
connected client 192.168.178.200
I can connect – got IP in the defined IP pool (192.168.178.200-235). So far so good.
The vpn server itself can access network devices (ping router)m have internet access – all good.
When I connect with a client to the vpn the client do not have access to network (and for sure no internet). And I have absolutely no clue why it is like it is.
Here some configurations:
ifconfig:
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.178.30 netmask 255.255.255.0 broadcast 192.168.178.255
inet6 fe80::215:5dff:feb2:400 prefixlen 64 scopeid 0x20<link>
ether 00:15:5d:b2:04:00 txqueuelen 1000 (Ethernet)
RX packets 14945 bytes 1567891 (1.5 MB)
RX errors 0 dropped 1450 overruns 0 frame 0
TX packets 11629 bytes 17035881 (17.0 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500
ether 00:15:5d:b2:04:00 txqueuelen 1000 (Ethernet)
RX packets 119119 bytes 15960612 (15.9 MB)
RX errors 0 dropped 242 overruns 0 frame 0
TX packets 50022 bytes 30409328 (30.4 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 2061 bytes 166782 (166.7 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2061 bytes 166782 (166.7 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tap0: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500
inet6 fe80::600c:35ff:fefa:a84f prefixlen 64 scopeid 0x20<link>
ether 62:0c:35:fa:a8:4f txqueuelen 100 (Ethernet)
RX packets 1142 bytes 107633 (107.6 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2531 bytes 225271 (225.2 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
netplan config:
# This file describes the network interfaces available on your system
# For more information, see netplan(5).
network:
version: 2
renderer: networkd
ethernets:
eth0:
dhcp4: no
bridges:
br0:
interfaces: [eth0]
dhcp4: no
addresses:
- 192.168.178.30/24
gateway4: 192.168.178.1
nameservers:
addresses: [8.8.8.8, 1.1.1.1]
OpenVPN server config:
local 192.168.178.30
port 1194
proto tcp
#dev tun
dev tap0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-crypt tc.key
topology subnet
#server 10.8.0.0 255.255.255.0
server-bridge 192.168.178.30 255.255.255.0 192.168.178.220 192.168.178.235
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 192.168.178.4"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option WINS 192.168.178.4"
push "topology subnet"
client-to-client
keepalive 10 120
cipher AES-256-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem
iptables list:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -p tcp -m tcp --dport 1194 -j ACCEPT
-A INPUT -i tap0 -j ACCEPT
-A INPUT -i br0 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
-A FORWARD -i br0 -j ACCEPT
Do anyone have a clue why I cannot access network devices in the VPNs lan?
Would appreciate every hint to solve that prob.
Best,
caom
