I know it's really hard to read long posts but I will try to be really short.
I've red thousands of posts and manuals but still could not find an answer.
I've set up openvpn connection on my openvpn server (DD-WRT router) and 1 client is connecting to it. The connection is established correctly, BUT NO INTERNET connection is available on client side. If I disconnect OPENVPN on client side Internet connection is working again.I've tried many combinations but still something is missing. The client is openwrt (Linux) and Server ddwrt (Linux).
My OpenVPN network is : 10.8.0.0/24
Tunnel : 10.8.0.1
Client: VPN 10.8.0.9 , LAN 192.168.1.1/24 , WAN 172.29.19.45
Server: OpenVPN 10.8.0.1, LAN 192.168.0.201/24, WAN 195.xxx.xxx.xxx
CLIENT TABLES:
109.175.81.224 172.29.19.45 255.255.255.255 UGH 0 0 0 usb0
172.29.19.44 0.0.0.0 255.255.255.252 U 0 0 0 usb0
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan
0.0.0.0 10.8.0.1 128.0.0.0 UG 0 0 0 tun0
128.0.0.0 10.8.0.1 128.0.0.0 UG 0 0 0 tun0
0.0.0.0 172.29.19.45 0.0.0.0 UG 0 0 0 usb0
CLIENT openvpn.conf
client
dev tun
proto tcp
remote z***.dyndns.org 1194
resolv-retry infinite
nobind
ca ca.crt
cert client1.crt
key client1.key
reneg-sec 0
cipher AES-256-CBC
comp-lzo
verb 3
ns-cert-type server
SERVER TABLES
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 109.175.48.1 0.0.0.0 UG 0 0 0 ppp0
10.8.0.0 0.0.0.0 255.255.255.0 U 0 0 0 tun2
109.175.48.1 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 br0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
SERVER openvpn.conf
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
keepalive 10 120
verb 3
mute 3
syslog
writepid /var/run/openvpnd.pid
management 127.0.0.1 14
management-log-cache 100
topology subnet
script-security 2
port 1194
proto tcp-server
cipher aes-256-cbc
auth sha1
client-config-dir /tmp/openvpn/ccd
comp-lzo adaptive
tls-server
ifconfig-pool-persist /tmp/openvpn/ip-pool 86400
tcp-nodelay
tun-mtu 1500
mtu-disc yes
server 10.8.0.0 255.255.255.0
dev tun2
tun-ipv6
client-config-dir /tmp/openvpn/ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.8.0.1"
CLIENT firewall settings
iptables -A forwarding_rule -i tun0 -j ACCEPT
iptables -A forwarding_rule -o tun0 -j ACCEPT
iptables -A output_rule -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o eth0 -s 10.8.0.0/24 -d 192.168.1.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -I FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -I PREROUTING -p udp -i tun0 -d 10.8.0.9 --dport 1:65535 -j DNAT --to 192.168.1.100:1-65535
iptables -t nat -I PREROUTING -p tcp -i tun0 -d 10.8.0.9 --dport 1:65535 -j DNAT --to 192.168.1.100:1-65535
iptables -t nat -I PREROUTING -p tcp -i tun0 -d 10.8.0.9 --dport 8090 -j DNAT --to 192.168.1.1:8090
iptables -t nat -I PREROUTING -p tcp -i tun0 -d 10.8.0.9 --dport 80 -j DNAT --to 192.168.1.100:80
SERVER firewall settings
iptables -I INPUT 1 -p udp -dport 1194 -j ACCEPT
iptables -I FORWARD 1 -source 192.168.0.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun2 -j ACCEPT
iptables -I FORWARD -i tun2 -o br0 -j ACCEPT
iptables -I FORWARD 1 -source 10.8.0.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o tun2 -j MASQUERADE
Just let me know what else to put here. But issue is still present with internet connection.
