I have installed OpenVPN on my R7800 (Nighthawk) router; I'm running OpenWrt 18.06.2, r7676-cddd7b4c77 and OpenVPN version is OpenVPN 2.4.5 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] library versions: OpenSSL 1.0.2q 20 Nov 2018, LZO 2.10
My local network is 192.168.40.X and .1 is the router
I'd like to have the VPN machine connect to my home network and be able to browse/share resources - this is how it has always worked, but now I connect, but can't access any local machine.
I believe my problem is within the router settings for networking, etc. (I'll get to that at the end).
My Server Config file reads:
mode server
tls-server
port 1194
proto udp
dev tun
cipher AES-256-CBC
auth SHA256
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
server 10.0.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.40.1"
client-to-client
comp-lzo
persist-key
persist-tun
verb 3
keepalive 20 60
log /etc/openvpn/openvpn.log
log-append /etc/openvpn/openvpn.log
My laptop's config file reads:
client
persist-tun
persist-key
cipher AES-256-CBC
auth SHA256
tls-client
ns-cert-type server
remote MYREMOTEDDNSADDRESS
nobind
port 1194
proto udp
dev tun
comp-lzo
verb 3
ca ca.crt
cert LapTop_01.crt
key Laptop_01.key
In the VPN log file (openvpn.log) I show all the connection info and that the remote machine has been assigned 10.0.0.6 (for example).
In my "Network", "Interfaces" I have an interface called VPN which shows up with "Error: Network device not present"
Under "Physical Settings" it is 'tun0'
Under "Firewall Settings" it has an icon showing lan: 3 icons vpn: 1 icon (I don't know what these icons are).
I don't know/remember any other settings
/etc/config/network has this set of lines
config interface 'vpn'
option ifname 'tun0'
option proto 'none'
Here's what I'd like -
the remote machine to have a 192.168.40.x address (if possible) and to be able to grab files/use resources on the network. For example, the file server is 192.168.40.28/Workfiles - I should be able to save/retrieve/etc.
I don't need all traffic to be pushed through the home machine when I browse; it's likely much slower to do that, so I don't care. If it does, so be it (I only use the VPN to make config changes on the router/server/retrieve and save files while working).
All of this worked perfectly on my old DDWRT router. I upgraded for better throughput and Wifi speed. My config files are virtually identical (except in the locations I'm apparently not looking).
So, what am I doing wrong?
Andrew