Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[cliclem]

Hello everyone, I bought a router dsr-250 (firmware 1.05B73_WW) from dlink and I try to use openvpn as a client.

I have 3 servers on my remote vpn and 5 computers on my local network. My wan network is 192.168.0.0 (adsl modem 192.168.1.1) , my lan network is 192.168.1.0 and my remote network is 10.8.0.0.
I succeded to configure the router for openvpn: from the router ping utility I can reach remote servers (10.8.0.1, 10.8.0.20 ...), but from the local network (192.168.1.10 for exemple) it's not possible :/

What is wrong ? do I have to configure a vlan, put some rules on the firewall, I 'm not admin-sys ... so please be tolerent with me
It make me really upset because I'm sure to be really close to the point, and for now every morning I have to start openvpn on my computer and my co-worker have to do so ... and when for example I use a vmware ubuntu to access nfs, if I start openvpn after the v.m. I have to force unmount and then remount devices, so it's not great

my question is why can't I access to 10.8.0.0 from 192.168.1.102 for example ?

here is my routing table

Destination Gateway Genmask Flags Metric Ref Use Iface
10.8.0.13 0.0.0.0 255.255.255.255 UH 0 0 0 tun1
10.8.0.0 10.8.0.13 255.255.255.0 UG 0 0 0 tun1
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 bdg1
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.0.254 0.0.0.0 UG 0 0 0 eth1

here is my config:



When I ping from My computer (192.168.1.102) it doesn't work, but when  I do it from the router utility:

PING 10.8.0.1 (10.8.0.1): 56 data bytes
64 bytes from 10.8.0.1: seq=0 ttl=64 time=70.684 ms
64 bytes from 10.8.0.1: seq=1 ttl=64 time=65.214 ms
64 bytes from 10.8.0.1: seq=2 ttl=64 time=110.588 ms
64 bytes from 10.8.0.1: seq=3 ttl=64 time=89.294 ms
64 bytes from 10.8.0.1: seq=4 ttl=64 time=38.522 ms

--- 10.8.0.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 38.522/74.860/110.588 ms

[FurryNutz]

If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems.
Double NAT

If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ.

[cliclem]

If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems.
Double NAT

If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ.

Sorry I made an error: I wrote '192.168.0.102' but I meant '192.168.1.102' ... Sorry ... so that's why you talk about bridge mode and nat problems ... 

I tried to put some route but without success ... do you see anything wrong in my ip routes ?


My problem is to reach 10.8.0.1 (vpn) from 192.168.1.102 (lan) ...

[FurryNutz]

Let see, here, can you give us a visual description of how this is all connected?

Example:
ISP Modem>Router<>any VPN or servers
                         <>Connected clients

[cliclem]

Well, I made a little picture ... but I don't know if it will help

[FurryNutz]

I wish all users could do this for us. Really helps us get a good idea of how things are set up. NICE man. Thank you. Let me see if I can get some additional help on this. This is a bit beyond my scope of experience.  However I know of some people who can I believe. Stay tuned.

[cliclem]

Thanks anyway , I will ask to technical support

[FurryNutz]

Let us know what they say and how it goes, good luck.

[jeffko123]

Hi, Sir
I try to study your scenario, in your case, DSR gateway can ping the remote site, but local PC can't, I think the problem might be the configuration issue on VPN server site.
I would like to know which device you set to be OpenVPN server? did you configure "remote network" on OpenVPN server to allow the remote access from 192.168.1.x network?