I have a WRT54GL (v 1.1).
Firmware is: DD-WRT v24-sp2 (10/10/09) vpn
I have setup the OpenVPN server on the router as per these instructions: http://www.dd-wrt.com/wiki/index.php/VP ... %29_v24%2B
I installed "OpenVPN Connect" on my Nexus 4 running Android 4.3.1
I can connect to my OpenVPN Server on my DD-WRT router.
But:
a) I cannot ping any other machine from my Android client on my network
b) I have no internet on my Android client
The config for openvpn server on the router:
Code: Select all
push "route 192.168.1.0 255.255.255.0"
push "dhcp-option DNS 192.168.66.1"
server 192.168.66.0 255.255.255.0
dev tun0
proto udp
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
Code: Select all
iptables -I INPUT 1 -p udp --dport 1194 -j ACCEPT
iptables -I FORWARD 1 --source 192.168.66.0/24 -j ACCEPT
# These next two lines may or may not be necessary.
# I (dereks) did not need them, but bmatthewshea did.
# Thus, we include them so that this works for more people:
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
Code: Select all
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote xx.xxx.xx.xxx 1194
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun0
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Try to preserve some state across restarts.
persist-key
persist-tun
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
ca ca.crt
cert client1.crt
key client1.key
# To avoid a possible Man-in-the-Middle attack
# where an authorized client tries to connect
# to another client by impersonating the server,
# make sure to enforce some kind of server
# certificate verification by clients.
#
# You can build your server certificates with
# the build-key-server script (see the easy-rsa
# documentation for more info). This will designate
# the certificate as a server-only certificate
# by setting the right attributes. Now add the
# following line to your client configuration:
remote-cert-tls server
# Delay n seconds (default=0) after connection
# establishment, before adding routes. If n is 0,
# routes will be added immediately upon connection
# establishment. If --route-delay is omitted, routes
# will be added immediately after TUN/TAP device open
# and --up script execution, before any --user or
# --group privilege downgrade (or --chroot execution.)
#
# This option is designed to be useful in scenarios
# where DHCP is used to set tap adapter
# addresses. The delay will give the DHCP handshake
# time to complete before routes are added.
#
# (Also if the pushed routes appear not to be added
# on windows hosts, add the following:)
route-delay 30
# Allow remote peer to change its IP address
# and/or port number, such as due to DHCP
# (this is the default if --remote is not used).
# --float when specified with --remote allows an
# OpenVPN session to initially connect to a peer
# at a known address, however if packets arrive
# from a new address and pass all authentication
# tests, the new address will take control of the
# session. This is useful when you are connecting
# to a peer which holds a dynamic address such
# as a dial-in user or DHCP client.
#
# Essentially, --float tells OpenVPN to accept
# authenticated packets from any address,
# not only the address which was specified
# in the --remote option.
float
I would really appreciate any help.
) 255.255.255.0 and my network connected to the router is 192.168.1.xxx 255.255.255.0