Everything seems to be ok but can't connect to internet

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
csb346
OpenVpn Newbie
Posts: 2
Joined: Fri Dec 23, 2022 3:36 pm

Everything seems to be ok but can't connect to internet

Post by csb346 » Fri Dec 23, 2022 3:58 pm

Hello all,

It's my first time trying to configure a VPN, I am clearly missing something and hope to have some help on that :lol:

The scenario is simple: I have a main router from my ISP and connected to one of his LAN port an Asus ZenWiFi AC Mini (with 2 more nodes). My home network is working perfectly.
I wanted to access my home network from outside so I setup the OpenVPN feature of my ASUS ZenWifi router like that:

Code: Select all

Interface Type	: TUN
Protocol	: UDP
Server Port	: 1194
Respond to DNS	: Yes
Advertise DNS to clients	: Yes
Encryption cipher	: AES-128-CBC
HMAC Authentication	: SHA 1
Compression	: Enable
Username / Password Auth. Only	:No
Authentication Mode	: TLS
RSA Encryption	 : 1024 bit
Extra HMAC authentication	: Disable
VPN Subnet / Netmask	: 10.8.0.0 / 255.255.255.0
Push LAN to clients	: Yes
Direct clients to redirect Internet traffic	: Yes
TLS Renegotiation Time	: -1
Manage Client-Specific Options	: No
Obvisouly, I had to create a port forwarding on my main router to redirect port 1194 to my Asus ZenWifi Router Internal IP, and I have a Dynamic DNS configured on my main router as well (because we don't have fixed IP here).

I installed the client on my android phone and my windows PC, configured it with the file downloaded from my router (after changing to my dyndns address), and everything connects right away.

I do have access to my local home network (I tried a local webserver with his local IP address), but I have no connection to anything outside my home.

Any idea what can cause this? Can it be the port forwarding mis-configured? firewall on the routers maybe?

Thank for the help everyone!

User avatar
openvpn_inc
OpenVPN Inc.
Posts: 1332
Joined: Tue Feb 16, 2021 10:41 am

Re: Everything seems to be ok but can't connect to internet

Post by openvpn_inc » Fri Dec 23, 2022 4:18 pm

Hello,

I would suggest to check if the DNS servers that are being pushed to VPN clients actually work. Very often the cause of a non-working Internet connection on VPN clients is a DNS server that doesn't work. Try pinging google.com and 8.8.8.8. If the first doesn't resolve but the second does respond, then it's a DNS issue. Check into which DNS server is being pushed to VPN clients and change that to one that works.

Also, why are 1024 bit certificates used? That's outdated. Should be 2048.

Kind regards,
Johan
Image OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support

csb346
OpenVpn Newbie
Posts: 2
Joined: Fri Dec 23, 2022 3:36 pm

Re: Everything seems to be ok but can't connect to internet

Post by csb346 » Fri Dec 23, 2022 4:25 pm

Thanks for the suggestion, I kept searching and find out the problem...

Asus ZenWifi router comes with an AIProtection feature that is actually pretty good to be honest. It blocked a lot of malicious sites. But it also blocked my vpn access to the internet. Disabling it solved the problem \o/

Now I have to go to Asus support team report that :D

Post Reply