Hello, I am trying to setup a VPN to monitor some IoT devices connected to a router in the field. The router is connected over LTE and I have somewhat successfully configured an openvpn client on the router. I aim to expose the router's subnet (192.168.7.0 / 255.255.255.0) over the VPN. I can connect my user client (full windows desktop) to the server and ping/administer the router (192.168.7.31) through the VPN over the 4G link. I cannot however access the IoT device on the subnet (192.168.7.1). Pinging the IoT device gets Request Timed Out. Connecting a device from inside the router LAN and pinging the VPN server works (10.8.0.1). Other clients can ping the server as well. I am not quite sure where to begin debugging. Attached are the configuration files for the server and windows client. The router was configured through the web interface. server.conf [code] port 1194 proto udp dev tun ca ca.crt cert ridefox-iot-vpn.crt key ridefox-iot-vpn.key # This file should be kept secret dh dh.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist /var/log/openvpn/ipp.txt push "route 192.168.7.0 255.255.255.0" client-config-dir ccd route 192.168.7.0 255.255.255.0 client-to-client keepalive 10 120 tls-auth ta.key 0 # This file is secret cipher AES-256-CBC persist-key persist-tun status /var/log/openvpn/openvpn-status.log verb 6 explicit-exit-notify 1 fragment 1561 [/code] ccd/router-client [code]iroute 192.168.7.0 255.255.255.0[/code] client.ovpn [code] client dev tun proto udp remote server.hostname.org 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert andrew-pc.crt key andrew-pc.key remote-cert-tls server tls-auth ta.key 1 cipher AES-256-CBC verb 3 fragment 1561 [/code] Router configuration [img]https://i.imgur.com/67IPY4v.png[/img]

Can't access devices behind router in OpenVPN configuration

ahirani-ridefox

Hello,

I am trying to setup a VPN to monitor some IoT devices connected to a router in the field. The router is connected over LTE and I have somewhat successfully configured an openvpn client on the router. I aim to expose the router's subnet (192.168.7.0 / 255.255.255.0) over the VPN. I can connect my user client (full windows desktop) to the server and ping/administer the router (192.168.7.31) through the VPN over the 4G link. I cannot however access the IoT device on the subnet (192.168.7.1). Pinging the IoT device gets Request Timed Out. Connecting a device from inside the router LAN and pinging the VPN server works (10.8.0.1). Other clients can ping the server as well. I am not quite sure where to begin debugging.

Attached are the configuration files for the server and windows client. The router was configured through the web interface.

server.conf


port 1194

proto udp

dev tun

ca ca.crt
cert ridefox-iot-vpn.crt
key ridefox-iot-vpn.key  # This file should be kept secret

dh dh.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist /var/log/openvpn/ipp.txt

push "route 192.168.7.0 255.255.255.0"
client-config-dir ccd
route 192.168.7.0 255.255.255.0

client-to-client


keepalive 10 120

tls-auth ta.key 0 # This file is secret

cipher AES-256-CBC

persist-key
persist-tun

status /var/log/openvpn/openvpn-status.log

verb 6

explicit-exit-notify 1

fragment 1561

ccd/router-client

iroute 192.168.7.0 255.255.255.0

client.ovpn

client
dev tun
proto udp
remote server.hostname.org 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert andrew-pc.crt
key andrew-pc.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
verb 3
fragment 1561

Router configuration

TinCanTech

There is a section in the howto specifically for this.

openvpn_inc

The router needs a static route to know how to reach the VPN addresses. If you're unable to set a route on the router, each device behind the router needs that route.

regards, rob0