Samba share via openVPN server on EdgeX router

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
Vespen
OpenVpn Newbie
Posts: 1
Joined: Sun Apr 09, 2023 2:58 pm

Samba share via openVPN server on EdgeX router

Post by Vespen » Sun Apr 09, 2023 3:10 pm

Hello

I have set up an openVPN server on my EdgeX router according to instructions here: https://help.ui.com/hc/en-us/articles/ ... VPN-Server

It works as expected, I can connect to the server from, for example, a 4G connected Windows 10 machine and ping devices on my local network at home and SSH into machines that are there without problems. The next step is that I want to be able to access my samba disk and I can't. The Samba server is on a physical Debian machine and I can SSH into it and see the disk and everything on it but not connect the disk as a network drive in the windows 10 machine (Yes this works when the windows 10 machine is connected locally).

After some trawling I find this instruction: https://openvpn.net/community-resources ... r-openvpn/

This is done and that instruction further refers to https://openvpn.net/community-resource ... ver-subnet.

I have a handle on IP forwarding but not TUN/TAP forwarding (I use TUN). The instructions point further to a faq where I can't find anything about tun/tap forwarding. More trawling says that it is about configuring the firewall for traffic between samba and the TUN interface and in a linux machine you apparently run the following command:

TUN/TAP forwarding:

Allow TUN interface connections to OpenVPN server

# iptables -A INPUT -i tun+ -j ACCEPT

Allow TUN interface connections to be forwarded through other interfaces

# iptables -A FORWARD -i tun+ -j ACCEPT

When I try to run this in my EdgeX it says you can forget it because there is no command called that.

How do I translate this in EdgeX?

I have also tried adding rule 5011 to the router to no avail. When I try to connect my win10 machine to the disk, I get the answer "The server is online but not responding".

Code: Select all

    nat {
        rule 5010 {
            description "masquerade for WAN"
            outbound-interface eth0
            type masquerade
        }
        rule 5011 {
            description "masquerade for VPN"
            log enable
            outbound-interface vtun0
            protocol all
            source {
                address 172.16.1.0/24
            }
            type masquerade
        }
    }
Any ideas? I'm just a hobby level network engineer so feel free to adjust the answer accordingly.

Post Reply