Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


gumdigger

425 posts

Ultimate Geek


#156065 18-Nov-2014 10:47
Send private message

I'm new to VPN and was wondering if i could get some help setting this up using openvpn.

I would like to setup VPN so communication between a lan device accessing the internet is encrypted.

i believe this can be achieved by setting up openvpn as a server on gargoyle and openvpn client on the other end?

Looking at my network diagram is this possible?

Click to see full size

Create new topic
sidkumar
84 posts

Master Geek


  #1177867 18-Nov-2014 11:51
Send private message

Yes it is possible. However, the Draytek must pass all the incoming OpenVPN traffic to the Gargoyle on the UDP ports you configure it for. I have a slightly different setup where my modem is setup as transparent and Gargoyle is setup to connect to the ISP.

You will need to setup a different IP range for your VPN clients as I think only TAP VPN is supported in Gargoyle and not TUN.

gumdigger

425 posts

Ultimate Geek


  #1177908 18-Nov-2014 12:43
Send private message

Hello

Do you mean put my modem in bride mode? Do i have to do this?. i Have port forwarded UDP 1195 on Gargoyle and DV120.
is it possible to get a screenshot of your OpenVPN Config page?

 
 
 
 


sidkumar
84 posts

Master Geek


  #1178031 18-Nov-2014 16:25
Send private message

You don't need to put it in bridge mode. It should work even in this scenario. Have you tried connecting?

gumdigger

425 posts

Ultimate Geek


  #1179626 19-Nov-2014 15:09
Send private message

Check my settings and please tell me what am i doing wrong.
Click to see full size

Click to see full size

Click to see full size

Subnet behind client in client settings set to "No Subnet Defined" or 192.168.1.0/24 allows me to ping 192.168.0.1 which is the gargoyle ip.
but i cant ping anything else on the LAN.

Please advise.

sidkumar
84 posts

Master Geek


  #1179896 19-Nov-2014 23:06
Send private message

I am assuming that your use case for the VPN is to connect to home network from Internet (say mobile broadband). Let me know if this is correct.

Your second image is missing in the post. Try these:
1. Allow credential re-use (second to last item in vpn server). Allow multiple clients to use the same certificate, at least for troubleshooting purpose.
2. Change the Client Connects to (third screenshot) to the WAN IP and not Other IP.
3. Re-Download the connection files and then try

Which type of client are you trying to connect and how is it connected to the Internet? Is it Android, IOS, Windows, Linux, Mac or something else?

Cheers.

gumdigger

425 posts

Ultimate Geek


  #1179962 20-Nov-2014 09:24
Send private message

Hi Sid.

I'm connecting via internet from another location. using windows openvpn client to connect.

I tried what you suggested but it fails to connect as soon as i set the client to use WAN IP instead of Other IP. Because my WAN IP (That gargoyle see's) is 192.168.1.11 which is not rout'able on the internet.

Please check the attached screenshots.

Click to see full size
Click to see full size

sidkumar
84 posts

Master Geek


  #1180003 20-Nov-2014 10:57
Send private message

Right, so definitely WAN IP will not work as you are not in bridge mode. Change it back to other and try with the public IP assigned to the modem (and not the domain).

When you connect to OpenVPN from Windows clent, do you get an IP address assigned? What is it? Which address are you trying to ping? Can you share the screenshot of route settings (Connection->Routing)? Do mask your public IP address.

The other thing I see in your settings that you have chosen to use VPN only for host behind VPN and not all traffic, this will require you to define the hosts behind VPN in your client settings.

Do remember to re-download the config and apply to client everytime you make change.

 
 
 
 


gumdigger

425 posts

Ultimate Geek


  #1180181 20-Nov-2014 15:14
Send private message

sidkumar: Right, so definitely WAN IP will not work as you are not in bridge mode. Change it back to other and try with the public IP assigned to the modem (and not the domain).

When you connect to OpenVPN from Windows clent, do you get an IP address assigned? What is it? Which address are you trying to ping? Can you share the screenshot of route settings (Connection->Routing)? Do mask your public IP address.

The other thing I see in your settings that you have chosen to use VPN only for host behind VPN and not all traffic, this will require you to define the hosts behind VPN in your client settings.

Do remember to re-download the config and apply to client everytime you make change.


I tried using public IP instead of the WAN IP option. but again i can only ping 192.168.0.1.

i get assigned 10.8.0.2.

route settings? is this what your after?



is this where i define the hosts behind VPN?

sidkumar
84 posts

Master Geek


  #1180199 20-Nov-2014 15:53
Send private message

In the second screenshot where you have to choose a subnet behind the host, select the 192.168.0.0, that is the one which is behind your VPN and has all the internal hosts like NAS, as per your original diagram. Or otherwise allow all traffic via the VPN, in your server settings.

Try tracert to one of the internal host after you have connected to the VPN and see where it is being dropped.

Create new topic





News »

Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32


NordVPN starts deploying colocated servers
Posted 7-Oct-2020 09:00


Google introduces Nest Wifi routers in New Zealand
Posted 7-Oct-2020 05:00


Orcon to bundle Google Nest Wifi router with new accounts
Posted 7-Oct-2020 05:00


Epay and Centrapay partner to create digital gift cards
Posted 2-Oct-2020 17:34


Inseego launches 5G MiFi M2000 mobile hotspot
Posted 2-Oct-2020 14:53









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.