Openvpn config to allow IGMP traffic?

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
flipthetip
OpenVpn Newbie
Posts: 3
Joined: Sat Nov 26, 2011 8:52 am

Openvpn config to allow IGMP traffic?

Post by flipthetip » Mon Jan 09, 2012 1:47 am

Im not pretty sure if i got the title correctly but here's my point.
I use my VPN to browse the internet. Lately, my ISP implemented IGMP and now I cant connect to the internet thru my VPN.

I checked google and some routing should be done though im not sure how to do it.
Any suggestions guys?
Any help will be warmly appreciated. thanks!

User avatar
Mimiko
Forum Team
Posts: 1564
Joined: Wed Sep 22, 2010 3:18 am

Re: Openvpn config to allow IGMP traffic?

Post by Mimiko » Mon Jan 09, 2012 6:27 am

Without any info on configuration - can't help. May be asking the ISP about changes they maid?

jamesmorison2011
OpenVpn Newbie
Posts: 1
Joined: Mon Jan 09, 2012 7:26 am

Re: Openvpn config to allow IGMP traffic?

Post by jamesmorison2011 » Mon Jan 09, 2012 7:29 am

I am not sure this is the problem. New versions allow UDP multicast and IGMP packets.

flipthetip
OpenVpn Newbie
Posts: 3
Joined: Sat Nov 26, 2011 8:52 am

Re: Openvpn config to allow IGMP traffic?

Post by flipthetip » Mon Jan 09, 2012 3:23 pm

here's current config.

SERVER SIDE:

local XX.XXX.XX.XXX
port 9200
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 4.2.2.1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server.log
verb 3


CLIENT SIDE:

client
dev tun
proto udp
remote XX.XXX.XX.XXX 9200
keepalive 10 60
resolv-retry infinite
redirect-gateway def1
tun-mtu 1500
tun-mtu-extra 32
comp-lzo
mute 1
mute-replay-warnings
ping-timer-rem
lport 9203
mssfix 1450
persist-key
persist-tun
ca ca.crt
route-method exe
auth-user-pass password.txt
float
reneg-sec 0
verb 1
script-security 2 system
route-delay 2

about the changes.well new rollouts are normal,now all vpn clients that we currently use,cannot push thru.
even browsing the internet thru the vpn cannot be done since the IGMP changes. any suggestions?

User avatar
Mimiko
Forum Team
Posts: 1564
Joined: Wed Sep 22, 2010 3:18 am

Re: Openvpn config to allow IGMP traffic?

Post by Mimiko » Tue Jan 10, 2012 7:18 am

Your OpenVPN server has a real IP?
Could you post some traceroute to 8.8.8.8?
Could you post the logs from client and server?
Are the pushed DNS accesible from cleint? ie a nslookup.

flipthetip
OpenVpn Newbie
Posts: 3
Joined: Sat Nov 26, 2011 8:52 am

Re: Openvpn config to allow IGMP traffic?

Post by flipthetip » Tue Jan 10, 2012 10:59 am

im not sure,how i can answer your questions.
but the logs are pretty normal.
still the same when things were still working, i can even go to my webmin page when im connected to the vpn,and i can also ping my IP.

i think this can be fixed thru some routing.
what do you guys think?

Post Reply