Reach the Client's LAN Network on the Asuswrt OpenVPN Server

deliad

hi,

I successfully setup my Asus RT-AX88U OpenVPN Server - the router

The client is able to connect and I can ping and connect all the router's LAN clients(computers) successfully
however, the Server( Asus RT-AX88U router) is unable to connect to the Client's Lan computers.

the client is an OpenWrt router with OpenVPN client addon

I bridged the lan and the tun0 together on the Client's OpenWrt router

I'm sure that some static routing needs to be done from/to the client/server, but I'm not sure how

I also read and found that I need to change the OpenVPN server config in the client/server to get the networks exposed to each other, but I'm not sure how

Router's OpenVPN Server Network - 10.8.0.*
Router's LAN Network - 192.168.9.*

Client's OpenWRT Router Network - 192.168.31.*

I want to be able to connect from 192.168.9.201 to 192.168.31.3

again from 192.168.31.3 to 192.168.9.201 i can connect successfully but from the server side i can't

here is my asuswrt OpenVPN server config:

# Automatically generated configuration

# Tunnel options
proto udp4
multihome
port 5737
dev tun21
sndbuf 0
rcvbuf 0
keepalive 10 30
up '/etc/openvpn/ovpn-up'
down '/etc/openvpn/ovpn-down'
setenv ovpn_type 0
setenv unit 1
script-security 2
daemon vpnserver1
verb 3
status-version 2
status status 10
plugin /usr/lib/openvpn-plugin-auth-pam.so openvpn

# Server Mode
server 10.8.0.0 255.255.255.0
client-config-dir ccd
client-to-client
duplicate-cn
push "route 192.168.9.0 255.255.255.0 vpn_gateway 500"
verify-client-cert none
username-as-common-name

# Data Channel Encryption Options
auth MD5
cipher AES-128-CBC

# TLS Mode Options
ca ca.crt
dh dh.pem
cert server.crt
key server.key

and here is the (OpenWRT router) OpenVPN Client Config:

remote 84.108.248.8 5737
float
nobind
proto udp
dev tun
sndbuf 0
rcvbuf 0
keepalive 10 30
auth-user-pass /etc/openvpn/deliadhomevpn.auth
client
auth MD5
cipher AES-128-CBC
remote-cert-tls server
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</ca>

<cert>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----

</key>

please tell me what to config and/or change exactly on each side to be able to reach the client lan from the server's lan

thanks

TinCanTech

deliad wrote I bridged the lan and the tun0 together on the Client's OpenWrt router

Do not do that.

deliad wroteduplicate-cn

Remove that.

Read this:
https://community.openvpn.net/openvpn/wiki/HOWTO?#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet

deliad

TinCanTech wrote
deliad wrote I bridged the lan and the tun0 together on the Client's OpenWrt router
Do not do that.

deliad wroteduplicate-cn
Remove that.

Read this:
https://community.openvpn.net/openvpn/wiki/HOWTO?#ExpandingthescopeoftheVPNtoincludeadditionalmachinesoneithertheclientorserversubnet

Hi, thanks, will do

I already read that article , i do need clarification about what exactly to do

Please tell me whats need to be done

deliad

hi,

now i succeeded to ping the client's LAN network from the OpenVPN Router's LAN network

all the ports that are open on the client's router are seems to be open from the OpenVPN Router's LAN network

BUT, they are just OPEN, they are not having any traffic on them, For example, port 80 of the Client Openwrt WebGUI is open but I can't connect to it