STILL unable to reach LAN, having tried many things!
Posted: Wed Jul 09, 2014 1:17 am
I have done much reading on the subject and attempted many of the solutions I have seen for this issue, but to date nothing has worked. I'm afraid I don't fully understand networking and VPNs as well as I should, so I may very well be going about the changes in the wrong way. I will outline my current situation and setup as best as possible here. If any additional information is required, please let me know what is needed (and possibly how to retrieve it) and I will post it.
Right now I currently have OpenVPN set up on my DD-WRT router (Netgear WNDR4300 running SVN revision 23919 patched for Heartbleed). The LAN is 10.0.0.0/16 and the VPN subnet is 10.8.0.0/24. I'm using primarily the OpenVPN Connect app for Android on my Nexus 7 (4.4.4) and my Galaxy S4 (4.4.2) and having the same issues on both. I can connect to the VPN just fine and browse the internet, but I am unable to ping anything on the network, including the router itself at 10.0.0.1
Router Config
Screenshot of DD-WRT VPN config: for some configurations not directly specified above,
http://i.imgur.com/osk3G5h.png
Client Config
Firewall
On both Android devices I'm able to successfully connect and browse the internet. It looks like it is pulling the routes I'm pushing (10.0.3.0/24 and 10.0.5.0/24, various servers and workstations I want access to) but they are not showing up in ip route. For what it's worth, I've also tried OpenVPN for Android with the exact same results (browsing, but no LAN). In log files, I see,
This is a non-rooted device, is it possible that it's not able to configure it locally? I've also tried adding push "redirect-gateway def1" but fail to get even internet access at that point. Please help?
Right now I currently have OpenVPN set up on my DD-WRT router (Netgear WNDR4300 running SVN revision 23919 patched for Heartbleed). The LAN is 10.0.0.0/16 and the VPN subnet is 10.8.0.0/24. I'm using primarily the OpenVPN Connect app for Android on my Nexus 7 (4.4.4) and my Galaxy S4 (4.4.2) and having the same issues on both. I can connect to the VPN just fine and browse the internet, but I am unable to ping anything on the network, including the router itself at 10.0.0.1
Router Config
Code: Select all
port 1194
proto udp
dev tun0
keepalive 10 120
dh /tmp/openvpn/dh.pem
ca /tmp/openvpn/ca.crt
cert /tmp/openvpn/cert.pem
key /tmp/openvpn/key.pem
server 10.8.0.0 255.255.255.0
comp-lzo
persist-key
persist-tun
verb 5
push "route 10.0.0.0 255.255.255.0"
push "route 10.0.3.0 255.255.255.0"
push "route 10.0.5.0 255.255.255.0"
management localhost 5001
http://i.imgur.com/osk3G5h.png
Client Config
Code: Select all
client
dev tun
proto udp
remote [MY DYNDNS] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert phone.crt
key phone.key
ns-cert-type server
cipher AES-128-CBC
comp-lzo
verb 4
auth MD5
Code: Select all
iptables -I INPUT 1 -p udp -dport=1194 -j ACCEPT
iptables -I FORWARD 1 -source=10.0.0.0/16 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
Code: Select all
17:32:36.128 -- Sending PUSH_REQUEST to server...
17:32:36.246 -- OPTIONS
0 [route] [10.0.0.0] [255.255.255.0]
1 [route] [10.0.3.0] [255.255.255.0]
2 [route] [10.0.5.0] [255.255.255.0]
3 [route-gateway] [10.8.0.1]
4 [topology] [subnet]
5 [ping] [10]
6 [ping-restart] [120]
7 [ifconfig] [10.8.0.5] [255.255.255.0]