Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


thekiwi

295 posts

Ultimate Geek


#196610 6-Jun-2016 17:05
Send private message

Hey all.

 

 

 

Have replaced an aging WRT54GL running Tomato with a newer AC1900 which Ive got Advanced Tomato running on.

 

Behind this I have a Win2k8 server and Im wanting to VPN into it.  Was working fine with the necessary port forwarding and mod to the iptables, but I just cant get it working on the new touter.

 

Has anyone got a similar system working well and can prod me in the right direction?

 

 

 

Cheers

 

 

 

Craig


Filter this topic showing only the reply marked as answer Create new topic
BarTender
3219 posts

Uber Geek

Trusted
Lifetime subscriber

  #1566614 6-Jun-2016 17:10
Send private message

Google for OpenVPN and OpenWRT and plenty of examples come up.




and


thekiwi

295 posts

Ultimate Geek


  #1566617 6-Jun-2016 17:14
Send private message

BarTender: Google for OpenVPN and OpenWRT and plenty of examples come up.

 

 

 

Sorry  may not have been quite detailed enough.  I dont want to VPN onto the router, Im trying pass through it to the Win2k8 server in behind.

 

Ive got all the necessary ports forwarded, but Im guessing GRE isnt.  

 

 

 

Ive tried vatious combinations of:

 

 

 

iptables -t nat -I PREROUTING -p 47 -j DNAT --to 10.0.0.12
iptables -I wanin -p 47 -d 10.0.0.12 -j logaccept
iptables -I INPUT -s 111.221.29.161 -j DROP

 


iptables -A INPUT -p tcp —dport 1723 -j ACCEPT
iptables -A INPUT -p gre -j ACCEPT
iptables -A INPUT -i ppp+ -j ACCEPT
iptables -A FORWARD -i ppp+ -j ACCEPT
iptables -A FORWARD -o ppp+ -j ACCEPT

 

iptables -t nat -I PREROUTING -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -i ppp+ -j ACCEPT
iptables -I FORWARD -i ppp+ -j ACCEPT

 

and
iptables -I INPUT 1 -p tcp —dport 1723 -j ACCEPT

 

 

 

but nothing works.


 
 
 
 


froob
579 posts

Ultimate Geek

Lifetime subscriber

  #1567378 7-Jun-2016 19:12
Send private message

Probably not any help to you, but quite recently I had an L2TP/IPSec server sitting behind my tomato router (Shibby mod), which worked with just the appropriate port forwarding rules. 


macuser
2120 posts

Uber Geek


  #1567399 7-Jun-2016 19:26
Send private message

If you're client is windows, need to change registry key to allow VPN behind nat (nat-transversal).

Additionally you need to be forwarding 500, 4500 and the 17XX port if L2TP/PPTP pass through is not an option on router.

If its a NAT-T issue, and not a port forwarding issue, you'll be able to connect using Android but not Windows. If its a port forwarding issue (aka 500, 4500) you won't be able to connect at all.

thekiwi

295 posts

Ultimate Geek


  #1567453 7-Jun-2016 20:26
Send private message

 

 

Ended up being one of those "DOOOHHhhh" moments :)

 

 

 

Just so happens on the day that I installed the new router, the Win2k8 server also needed restarting ... and Routing and Remote Access service didnt auto start!!!

 

So Id been testing against a dead end! Found out when I put the old router back online and VPN's still wouldnt work.

 

SO I had the standard VPN port forwarding, and then added to the Firewall Scripts:

 

 

 

iptables -t nat -I PREROUTING -p 47 -j DNAT --to 10.0.0.12
iptables -I wanin -p 47 -d 10.0.0.12 -j logaccept
iptables -I INPUT -s 111.221.29.161 -j DROP

 

 

 

and all was good! :)


Filter this topic showing only the reply marked as answer Create new topic





News »

Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32


NordVPN starts deploying colocated servers
Posted 7-Oct-2020 09:00


Google introduces Nest Wifi routers in New Zealand
Posted 7-Oct-2020 05:00


Orcon to bundle Google Nest Wifi router with new accounts
Posted 7-Oct-2020 05:00


Epay and Centrapay partner to create digital gift cards
Posted 2-Oct-2020 17:34


Inseego launches 5G MiFi M2000 mobile hotspot
Posted 2-Oct-2020 14:53









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.