Can't get internet by OpenVpn.

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
czarekplpl
OpenVpn Newbie
Posts: 8
Joined: Fri Jun 09, 2017 8:22 pm

Can't get internet by OpenVpn.

Post by czarekplpl » Sat May 26, 2018 7:42 am

Hello.

I cannot get any ping except my server. Only get the connection between the server and my location.
Can anybody help me how to find the problem??

linux
[root@czaro ~]# uname -a
Linux czaro 2.6.32-042stab116.2 #1 SMP Fri Jun 24 15:33:57 MSK 2016 x86_64 x86_64 x86_64 GNU/Linux


route -n
[root@czaro ~]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 venet0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 venet0


ipconfig
[root@czaro ~]# ifconfig
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 0 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.8.0.1 netmask 255.255.255.255 destination 10.8.0.2
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 100 (UNSPEC)
RX packets 704 bytes 191694 (187.2 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

venet0: flags=211<UP,BROADCAST,POINTOPOINT,RUNNING,NOARP> mtu 1500
inet 127.0.0.1 netmask 255.255.255.255 broadcast 0.0.0.0 destination 127.0.0.1
inet6 2402:9e80:0:1000::1:fe7d prefixlen 128 scopeid 0x0<global>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 0 (UNSPEC)
RX packets 31265 bytes 5378790 (5.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 23117 bytes 3800358 (3.6 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

venet0:0: flags=211<UP,BROADCAST,POINTOPOINT,RUNNING,NOARP> mtu 1500
inet 45.xxx.64.3xx netmask 255.255.255.255 broadcast 45.xxx.64.xx destination 45.xxx.64.xx
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 0 (UNSPEC)

Server.conf
server.conf
%
client-to-client
persist-key
persist-tun
ca /etc/openvpn/ssl/ca.crt
cert /etc/openvpn/ssl/czaro.crt
comp-lzo adaptive
dev tun
dh /etc/openvpn/ssl/dh.pem
ifconfig-pool-persist server-ipp.txt 0
keepalive 10 120
key /etc/openvpn/ssl/czaro.key
tls-auth /etc/openvpn/ssl/ta.key 0
cipher AES-256-CBC
auth SHA512
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
log /var/log/openvpn/server.log
port 1194
proto udp
server 10.8.0.0 255.255.255.0
verb 3
crl-verify /etc/openvpn/ssl/crl.pem
route 10.8.0.0 255.255.255.0
push "route 10.8.0.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"



Client.ovpn
client.ovpn
client
dev tun
proto udp
port 1194
remote x.x.x.x 1194 udp
remote-cert-tls server
resolv-retry infinite
nobind
persist-key
persist-tun
comp-lzo
verb 3
cipher AES-256-CBC
auth SHA512
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
auth-nocache
redirect-gateway def1
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>
<cert>

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

</key>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
e052a868382a69fb8c363add31401924
5cc70270c08825a80a7e00abafcee448
3fbcf8bbce5422588323a5d67906f9f9
c1a66438802e1f3b51326bb12d615084
4c509ad761af2c025e02cc9cf8ad4ca8
a2e716fc544e9fecc5f01e22a152e7b6
a370d739f0601f6b239f2fac3e3b8139
c758dc7073669f60e7777d5c9718e8bc
f3bb39e7f39c005aff0ddf9ea16dc634
b84a3213573a34efb626da35892bde24
a8e6c5980b8142abb01af132bad32ba5
6581a99db3b692b5c9432a32cf4fb4ee
0f1854187554e4e2d4d0ac5d894c610a
14056b67f63ecad2b296386796d31aba
a7a9f0e548333a64c23a81c3dfb6b657
62dc6cfff761986ade803a1ba7dcf2c5
-----END OpenVPN Static key V1-----



</tls-auth>


Top
bbuckm
OpenVPN User
Posts: 39
Joined: Thu Apr 26, 2018 2:45 pm

Re: Can't get internet by OpenVpn.

Post by bbuckm » Sun May 27, 2018 1:34 am

Usually when you can't reach the Internet, it's because you've missed out some vitally important step in the set-up procedure.
Top
czarekplpl
OpenVpn Newbie
Posts: 8
Joined: Fri Jun 09, 2017 8:22 pm

Re: Can't get internet by OpenVpn.

Post by czarekplpl » Sun May 27, 2018 3:19 am

I've checked everything few times and cannot find the conf problem.
Top
TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Can't get internet by OpenVpn.

Post by TinCanTech » Sun May 27, 2018 12:34 pm

HOWTO: Routing all client traffic (including web-traffic) through the VPN
Top
czarekplpl
OpenVpn Newbie
Posts: 8
Joined: Fri Jun 09, 2017 8:22 pm

Re: Can't get internet by OpenVpn.

Post by czarekplpl » Mon May 28, 2018 8:07 am

I use all these directives but still does not work.
Top
bbuckm
OpenVPN User
Posts: 39
Joined: Thu Apr 26, 2018 2:45 pm

Re: Can't get internet by OpenVpn.

Post by bbuckm » Mon May 28, 2018 8:58 pm

czarekplpl wrote: ↑
Sun May 27, 2018 3:19 am
 I've checked everything few times and cannot find the conf problem.
It is not always a conf problem. Other steps can be missed too (iptables, kernel).
Top
Post Reply

Return to “Configuration”