Cannot Tunnel Local Connection

Need help configuring your VPN? Just post here and you'll get that help.
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
grafstring
OpenVpn Newbie
Posts: 5
Joined: Wed Jun 22, 2011 3:25 am

Cannot Tunnel Local Connection

Post by grafstring » Wed Jun 22, 2011 4:20 am

Hello,

I'm trying to set up a VPN, but I seem to have run into some trouble.
Here's my client.ovpn

Code: Select all

client
dev tap
#dev-node MyTAP
proto udp
remote (censored).dyndns.org 19925
route 192.168.1.0 255.255.255.0 vpn_gateway 3
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\sami.crt" 
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\sami.key"  
tls-auth ta.key 1
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 1
Here's my server.ovpn

Code: Select all

local 192.168.1.150
port 19925
proto udp
mssfix 1400
push "dhcp-option DNS 8.8.8.8"   
#push "dhcp-option DNS 8.8.4.4"
dev tap
#dev-node MyTAP 
ca "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\ca.crt"  
cert "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.crt"
key "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\server.key"
dh "C:\\Program Files\\OpenVPN\\easy-rsa\\keys\\dh2048.pem"
tls-auth ta.key 0   
server 192.168.10.0 255.255.255.128 
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"   
keepalive 10 120
cipher AES-128-CBC  
comp-lzo
max-clients 6   
persist-key
persist-tun
status openvpn-status.log
verb 1
So, I connect just fine to the VPN, and I try to ping the server @ 192.168.10.1. It pings fine. I try to ping my router @ 192.168.1.1. All my pings time out. I try to ping google, and it doesn't even get the IP. So I'm thinking something is up with my DNS servers. I'm using Google DNS because Comcast DNS is really unreliable in this area.

Also, I get this message in my client log:
WARNING: potential route subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.0/255.255.255.0]

So I check out the routing tables, and they look pretty normal.
Image

So, I don't know if this is a problem with my configuration, or if I can't use the internet behind my home VPN, because I haven't tested the VPN from another, remote site. Can anyone shed some light on this?

User avatar
maikcat
Forum Team
Posts: 4202
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Cannot Tunnel Local Connection

Post by maikcat » Wed Jun 22, 2011 6:36 am

hi there,

>WARNING: potential route subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.0/255.255.255.0]

this means that both lans (client & server) have 192.168.1.0 subnet..

it wont work this way.

Michael
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

grafstring
OpenVpn Newbie
Posts: 5
Joined: Wed Jun 22, 2011 3:25 am

Re: Cannot Tunnel Local Connection

Post by grafstring » Wed Jun 22, 2011 7:09 pm

maikcat wrote:hi there,

>WARNING: potential route subnet conflict between local LAN [192.168.1.0/255.255.255.0] and remote VPN [192.168.1.0/255.255.255.0]

this means that both lans (client & server) have 192.168.1.0 subnet..

it wont work this way.

Michael
It looks like I set up the VPN to the 192.168.10.X, and the local to 192.168.1.X. So how is there a conflict?

User avatar
maikcat
Forum Team
Posts: 4202
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Cannot Tunnel Local Connection

Post by maikcat » Thu Jun 23, 2011 7:48 am

hi there,

it says about your lan ips not vpn...

what lan ip your client has?

Michael.
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

grafstring
OpenVpn Newbie
Posts: 5
Joined: Wed Jun 22, 2011 3:25 am

Re: Cannot Tunnel Local Connection

Post by grafstring » Thu Jun 23, 2011 5:48 pm

maikcat wrote:hi there,

it says about your lan ips not vpn...

what lan ip your client has?

Michael.
My LAN IP for the client is 192.168.1.X

User avatar
maikcat
Forum Team
Posts: 4202
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Cannot Tunnel Local Connection

Post by maikcat » Thu Jun 23, 2011 6:01 pm

please remove this from client config

>route 192.168.1.0 255.255.255.0 vpn_gateway 3

Michael
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

grafstring
OpenVpn Newbie
Posts: 5
Joined: Wed Jun 22, 2011 3:25 am

Re: Cannot Tunnel Local Connection

Post by grafstring » Thu Jun 23, 2011 6:24 pm

maikcat wrote:please remove this from client config

>route 192.168.1.0 255.255.255.0 vpn_gateway 3

Michael
Well, it's resolving domain names to IP addresses, but pinging shows that all my requests time out.

User avatar
maikcat
Forum Team
Posts: 4202
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Cannot Tunnel Local Connection

Post by maikcat » Fri Jun 24, 2011 6:43 am

user bebop wrote a very nice howto
please take a look here..

topic7806.html

Michael.
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

grafstring
OpenVpn Newbie
Posts: 5
Joined: Wed Jun 22, 2011 3:25 am

Re: Cannot Tunnel Local Connection

Post by grafstring » Sun Jun 26, 2011 5:11 am

Okay, that page worked in that I have internet access behind my local connection. But when I run a tracert, I still see my router as the first step. Shouldn't I see my server first?

Post Reply