Use Remote Internet Access

RR13

How to use Remote Internet Access instead of Local Internet Access when connecting to an OpenVPN cloud?

openvpn_inc

Hello RR13,

OpenVPN Cloud only provides a private-only internal network. It does not provide an egress point where Internet traffic from connected VPN clients can reach out to the Internet. But you can add such an egress point yourself, and send VPN client traffic through there to the Internet.

This guide describes this:
https://openvpn.net/cloud-docs/secure-internet-access-admin-guide/

Kind regards,
Johan

krave

openvpn_inc wrote Hello RR13,

OpenVPN Cloud only provides a private-only internal network. It does not provide an egress point where Internet traffic from connected VPN clients can reach out to the Internet. But you can add such an egress point yourself, and send VPN client traffic through there to the Internet.

This guide describes this:
https://openvpn.net/cloud-docs/secure-internet-access-admin-guide/

Kind regards,
Johan

Hi Johan,

I have followed your instruction to successfully access Internet from within the OpentVPN Cloud network. My connector is Ubuntu 20.04 which is a VPS provided by kamatera. My own machine is Windows 10 PC.

Everything works great so far. Web browsing and so on.

But I can not ping www.google.com.
ping command complains

> Destination net unreachable.

Do you have a clue how to solve this issue?

openvpn_inc

Hello krave,

After discussing with a colleague of mine, we think it's probably a misconfiguration on the Connector that is providing Internet access to OpenVPN Cloud. Can you verify that IP forwarding for IPv6 is enabled on this node that provides Internet access?

Here's for example how a Linux node configured as a Connector can provide IPv4 and IPv6 access;

# Allow IPv4 and IPv6 packet forwarding
sudo sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g' /etc/sysctl.conf
sudo sed -i 's/#net.ipv6.conf.all.forwarding=1/net.ipv6.conf.all.forwarding=1/g' /etc/sysctl.conf
sudo sysctl -p

# NAT all IPv4 and IPv6 traffic via Default interface
IF=$(ip route | grep default | awk '{print $5}')
sudo iptables -t nat -A POSTROUTING -o $IF -j MASQUERADE
sudo ip6tables -t nat -A POSTROUTING -o $IF -j MASQUERADE

Perhaps it is simply this that's blocking IPv6 while IPv4 may be working normally.

It's also possible that there's a firewall installed in or around the node that provides Internet access, and that that's blocking IPv6. So I suggest you check these things and see if you can get things working properly then.

Kind regards,
Johan

krave

Hello Johan,

Thank you for your prompt reply!

I have double checked with the connector provider.
They have confirmed with me that their node doesn't work with IPv6.

Thanks for your help!

openvpn_inc

Hello krave,

Oh, well, that explains that then, haha.

Alright then, have a nice day,
Johan