Internet Routing Issue

[Francois42]

I need to route all network traffic over my VPN connection, and I had that configuration working last week. However, the Linksys router that I was using for that purpose got replaced with a shiny new Netgear WNDR3700 router (the only change in the configuration!), and while I installed a Static Route on the Netgear, the configuration now fails to function.

I can ping around inside the network. From the VPN'ed computer, I can ping the machines on the local (.1.X) network. From the local network, I can ping the VPN'ed computer. But as soon as I try to send a request from the VPN computer that has to head out to the internet, pings, HTTP requests, and everything else, stops.

I'd assume it's something in the Netgear configuration, but I'm posting everything here for help! Thanks in advance!

Netgear Static Route:
Destination IP Address: 192.168.2.0
IP Subnet Mask: 255.255.255.0
Gateway IP Address: 192.168.1.120 (IP Address assigned to server running OpenVPN)
Metric: 2

Server Config:

Code: Select all

port 500
proto udp
dev tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key  # This file should be kept secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 192.168.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.1.0 255.255.255.0"
push "redirect-gateway def1"
push "dhcp-option DNS 209.18.47.61"
push "dhcp-option DNS 209.18.47.62"
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
log         openvpn.log
verb 4

Client Config:

Code: Select all

client
dev tun
proto udp
remote myservername.wouldgohere.net 500
resolve-retry infinite
nobind
persist-key
persist-tun
ca C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\ca.crt
cert C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\suave-iii.crt
key C:\\Program\ Files\ (x86)\\OpenVPN\\easy-rsa\\keys\\suave-iii.key
comp-lzo
verb 4
route 192.168.1.0 255.255.255.0 vpn_gateway 3

[gladiatr72]

Hello,

It sounds like your netgear might not understand that it needs to nat your VPN client network. I'm not familiar with netgear's firmware, so I can't speculate what might need to be done there, but if you really need all of your client traffic to travel over the VPN link, you might want to explore configuring a bridged configuration rather than a routed one.

-Stephen