VPN-connection over mobile network

[xjim]

Good morning,
on my FritzBox is an OpebnVPN-Server running. Everything works perfect expect on the iPhone. I reach my internal network only if I create a VPN-conection over wifi. If I create a VPN-conection over the mobile network, I don’t reach my internal network. I Come from Germany and I use T-Mobile as provider.
Has anyone an idea?

[lolex]

Does it work only from your own wifi network, ie the one created by the fritzbox? Or also from other wifi networks (like work, friends)?

[xjim]

Does it work only from your own wifi network, ie the one created by the fritzbox? Or also from other wifi networks (like work, friends)?

No it works from all other wifi networks.

[mwandelaar]

While connected via the mobile network, can you reach the vpn-server on it's vpn-address?

One thing i remember from a few years ago when i was in Germany and used the Vodafone network, is the allocation of the ip-addresses Vodafone used to the clients: it where internal addresses and they used RFC1918 addresses, all 10.0.0.0/8. This would route packets to your internal LAN to the default gateway, as they are not link-local and thus being sent to the providers network, instead throug the tunnel.

You might want to try to redirect your gateway, as this explicitly pushes the packets into the tunnel.

[lolex]

What do you mean by "I don’t reach my internal network"?
Can you successfully connect to the VPN server over the cellular network? Can you ping your VPN server? Can you ping any other hosts on your internal network?

And what address range is your internal network using? If its the same as the internal network of your mobile provider, youd have to work around this.

[alapaje]

I don't have the same problem..

I have the openvpn app, configured to reach my server on the port 443 to allow me to go through some firewalls
On a wifi network, it's working perfectly. Through my cellphone connection, i have sometimes trouble, but it's working

Best regards

[xjim]

Sorry for my late....

While connected via the mobile network, can you reach the vpn-server on it's vpn-address?

Yes I do reach the VPN-server.

it where internal addresses and they used RFC1918 addresses, all 10.0.0.0/8

Yes you are right. In Germany all providers use such IPs for the clients.

What do you mean by "I don’t reach my internal network"?
Can you successfully connect to the VPN server over the cellular network? Can you ping your VPN server? Can you ping any other hosts on your internal network?

And what address range is your internal network using? If its the same as the internal network of your mobile provider, youd have to work around this.

Yes I can successfully connect to the VPN server over the cellular network and I can ping the VPN-server and more hosts. And that sucks. I can ping the hosts but I can't access any webinterface. That's only when I'm connected over the cellular network.
I'm using 10.0.0.0/24 for my internal network. I don't know which subnetmask tmobile is using.

[xjim]

configured to reach my server on the port 443

I did it too and works well now