L2VPN Ubuntu to USG issues

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › L2VPN Ubuntu to USG issues

Ge0rge

2052 posts

Uber Geek

Trusted

Lifetime subscriber

#259904 29-Oct-2019 15:08

Team,

I'm having an issue trying to connect to my L2VPN from a remote location.

The vpn gateway is set up on my USG-3, and seems to be working correctly. From my phone or tablet (both Android) I can connect and browse around my home network, internet etc without issue.

When I try to connect using an ODroid that is running Ubuntu Mate 18.04, it will connect ok but I can't do anything - unable to ping any devices on the home network, can't browse the internet etc.

Googling the issue provides plenty of solutions for getting the vpn connection up, but that's not the issue I don't think - ubuntu reports that the connection is made ok, and has an IP from the USG. It's the lack of anything once the connection is made, and I'm not seeing anything about that.

Any suggestions would be greatly appreciated. I'm not tied to ubuntu, happy to make changes at the remote end, but I'm only able to access the USG properly when I go home in the weekends - their app isn't the greatest for making significant changes remotely unfortunately.

davidcole

6029 posts

Uber Geek

Trusted

#2345865 29-Oct-2019 15:17

Does the vpn work via a phone?

How do you authenticate to the USG vpn, with the inbuilt radius server?

What network do vpn users connect to (same as the main lan)?

I use the USG for vpn in to home, it uses a seperate network (192.168.30.x where my main lan is 192.168.10.x) and uses the inbuilt radius server for authentication. I don't believe doing it this way requires the addition of any firewall rules. Primary VPN client is an iPhone.

Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight

Ge0rge

2052 posts

Uber Geek

Trusted

Lifetime subscriber

#2345869 29-Oct-2019 15:25

Yup, it works via phone and tablet - now I think about it, it also worked on a plain ubuntu laptop (that has since died and been replaced by the odroid).

Authentication is via preshared key - I have the radius server key but it's not in either the phone or tablet that still work.

Separate lan for the vpn, but it seems to just work for the phone, only issue seems to be the odroid - it can't even ping the USG, but watching the journal on the odroid shows it talking to the USG, authenticating, and sending keep alive pings. I just won't connect to anything on the home network.

davidcole

6029 posts

Uber Geek

Trusted

#2345870 29-Oct-2019 15:27

Ge0rge: Yup, it works via phone and tablet - now I think about it, it also worked on a plain ubuntu laptop (that has since died and been replaced by the odroid).

Authentication is via preshared key - I have the radius server key but it's not in either the phone or tablet that still work.

Separate lan for the vpn, but it seems to just work for the phone, only issue seems to be the odroid - it can't even ping the USG, but watching the journal on the odroid shows it talking to the USG, authenticating, and sending keep alive pings. I just won't connect to anything on the home network.

Connect via dns or via ip either? Wonder if the odroid is ignoring routing?? Sorry I haven't tried anything but a phone via the vpn.

Ge0rge

2052 posts

Uber Geek

Trusted

Lifetime subscriber

#2345873 29-Oct-2019 15:35

Direct connect using static IP at home. Remote connection is via cgnat, but it doesn't seem to affect the phone.

I did wonder if perhaps Mate didn't quite have all the appropriate packages to deal with vpn correctly as it is pared down, might be worth running a standard ubuntu live usb and testing that on the odroid tonight.

That, or poking a hole in the USG firewall to my server and just running openvpn instead, but that would have to wait until Friday...

BarTender

3606 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2345947 29-Oct-2019 17:31

You can run the USG as a OpenVPN server... so that is how I would do it and run OpenVPN on the ODroid and you should be away.