OpenVPN client config - connected but no internet access from LAN

Installing and Using OpenWrt Network and Wireless Configuration
9

Thanks a lot ! with you syntax I could copy it :slight_smile:

C:\Users\daroc\Downloads\cmder
位 del /f /q "%USERPROFILE%\.ssh\known_hosts"

C:\Users\daroc\Downloads\cmder
位 scp c:\VPN\ca1.tcp.zoogvpn.ovpn root@192.168.1.1:/etc/openvpn/ca1.tcp.zoogvpn.ovpn
The authenticity of host '192.168.1.1 (192.168.1.1)' can't be established.
RSA key fingerprint is SHA256:T6Tt4PrjL3dmCjfQYGV/epSqwo06Aon6SiHUKu8u1+k.
Are you sure you want to continue connecting (yes/no)?
Warning: Permanently added '192.168.1.1' (RSA) to the list of known hosts.
ca1.tcp.zoogvpn.ovpn                                                                  100% 4468     4.4KB/s   00:00

i have continued the tutorial

Package openvpn-openssl (2.4.5-4.2) installed in root is up to date.
Package luci-app-openvpn (git-19.011.54896-1f423b1-1) installed in root is up to                                                                                                                                date.
Package openssl-util (1.0.2p-1) installed in root is up to date.
root@OpenWrt:~# uci set network.vpnclient="interface"
root@OpenWrt:~# uci set network.vpnclient.ifname="tun0"
root@OpenWrt:~# uci set network.vpnclient.proto="none"
root@OpenWrt:~# uci commit network && service network restart
root@OpenWrt:~# uci add firewall zone
cfg11dc81
root@OpenWrt:~# uci set firewall.@zone[-1].name="vpnclient"
root@OpenWrt:~# uci add_list firewall.@zone[-1].network="vpnclient"
root@OpenWrt:~# uci set firewall.@zone[-1].input="REJECT"
root@OpenWrt:~# uci set firewall.@zone[-1].output="ACCEPT"
root@OpenWrt:~# uci set firewall.@zone[-1].forward="REJECT"
root@OpenWrt:~# uci set firewall.@zone[-1].masq="1"
root@OpenWrt:~# uci set firewall.@zone[-1].mtu_fix="1"
root@OpenWrt:~# uci add firewall forwarding
cfg12ad58
root@OpenWrt:~# uci set firewall.@forwarding[-1].src="lan"
root@OpenWrt:~# uci set firewall.@forwarding[-1].dest="vpnclient"
root@OpenWrt:~# ci commit firewall && service firewall restart
-ash: ci: not found
root@OpenWrt:~# uci commit firewall && service firewall restart
Warning: Unable to locate ipset utility, disabling ipset support
 * Flushing IPv4 filter table
 * Flushing IPv4 nat table
 * Flushing IPv4 mangle table
 * Flushing IPv6 filter table
 * Flushing IPv6 mangle table
 * Flushing conntrack table ...
 * Populating IPv4 filter table
   * Rule 'Allow-DHCP-Renew'
   * Rule 'Allow-Ping'
   * Rule 'Allow-IGMP'
   * Rule 'Allow-IPSec-ESP'
   * Rule 'Allow-ISAKMP'
   * Forward 'lan' -> 'wan'
   * Forward 'lan' -> 'vpnclient'
   * Forward 'lan' -> 'vpnclient'
   * Zone 'lan'
   * Zone 'wan'
   * Zone 'vpnclient'
   * Zone 'vpnclient'
 * Populating IPv4 nat table
   * Zone 'lan'
   * Zone 'wan'
   * Zone 'vpnclient'
   * Zone 'vpnclient'
 * Populating IPv4 mangle table
   * Zone 'lan'
   * Zone 'wan'
   * Zone 'vpnclient'
   * Zone 'vpnclient'
 * Populating IPv6 filter table
   * Rule 'Allow-DHCPv6'
   * Rule 'Allow-MLD'
   * Rule 'Allow-ICMPv6-Input'
   * Rule 'Allow-ICMPv6-Forward'
   * Rule 'Allow-IPSec-ESP'
   * Rule 'Allow-ISAKMP'
   * Forward 'lan' -> 'wan'
   * Forward 'lan' -> 'vpnclient'
   * Forward 'lan' -> 'vpnclient'
   * Zone 'lan'
   * Zone 'wan'
   * Zone 'vpnclient'
   * Zone 'vpnclient'
 * Populating IPv6 mangle table
   * Zone 'lan'
   * Zone 'wan'
   * Zone 'vpnclient'
   * Zone 'vpnclient'
 * Set tcp_ecn to off
 * Set tcp_syncookies to on
 * Set tcp_window_scaling to on
 * Running script '/etc/firewall.user'
root@OpenWrt:~# uci set openvpn.vpnclient="openvpn"
root@OpenWrt:~# uci set openvpn.vpnclient.enabled="1"
root@OpenWrt:~# uci set openvpn.vpnclient.config="/etc/openvpn/ca1.tcp.zoogvpn.o
vpn"
root@OpenWrt:~# uci commit openvpn && service openvpn restart
root@OpenWrt:~# sed -r -i "
> s:^(auth-user-pass).*:\1 /etc/openvpn/vpnclient.auth\nauth-nocache:
> s:^(redirect-gateway).*:\1 def1:
> " /etc/openvpn/ca1.tcp.zoogvpn.ovpn
root@OpenWrt:~# cat << "EOF" > /etc/openvpn/vpnclient.auth && chmod 600 /etc/ope
nvpn/vpnclient.auth
> my user vpn 
> my password vpn
> EOF
root@OpenWrt:~# service openvpn restart

but when i try Ensure OpenVPN Client service is running
i have a lot of errors like

root@OpenWrt:~# ps | grep [o]penvpn; echo && logread -e openvpn

Sun Jan 13 14:39:07 2019 daemon.err openvpn(vpnclient)[10870]: Options error: In                                                                                                                                [CMD-LINE]:1: Error opening configuration file: openvpn-vpnclient.conf
Sun Jan 13 14:39:07 2019 daemon.warn openvpn(vpnclient)[10870]: Use --help for m

and in the web interface i have on ovenvpn service 脿 connection vpn enabled but not started.
The pb can be from my vpn provider ? (zoogVPN)

one more time thanks a lot !