I Have followed this guide to set op an OpenVPN server on my router, and the tunnel is up.
However i have no LAN access, when tunnel is connected. Internet access is without issues
Can anyone tell me what i am missing?
root@netgear:~# uci show network; uci show firewall; uci show openvpn;
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd02:aad7:8cb5::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.lan.dns='8.8.8.8' '8.8.4.4'
network.lan.ifname='eth1.1'
network.guest=interface
network.guest.proto='static'
network.guest.ipaddr='192.168.2.1'
network.guest.netmask='255.255.255.0'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='dhcp'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 6t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='5 0t'
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='ACCEPT'
firewall.lan=zone
firewall.lan.name='lan'
firewall.lan.input='ACCEPT'
firewall.lan.output='ACCEPT'
firewall.lan.forward='REJECT'
firewall.lan.network='lan'
firewall.lan.device='tun0'
firewall.wan=zone
firewall.wan.name='wan'
firewall.wan.input='REJECT'
firewall.wan.output='ACCEPT'
firewall.wan.forward='REJECT'
firewall.wan.masq='1'
firewall.wan.mtu_fix='1'
firewall.wan.network='wan'
firewall.lan_wan=forwarding
firewall.lan_wan.src='lan'
firewall.lan_wan.dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@redirect[0]=redirect
firewall.@redirect[0].src='wan'
firewall.@redirect[0].name='SMTP'
firewall.@redirect[0].src_dport='25'
firewall.@redirect[0].target='DNAT'
firewall.@redirect[0].dest_ip='192.168.1.200'
firewall.@redirect[0].dest='lan'
firewall.@redirect[0].proto='tcp'
firewall.@redirect[1]=redirect
firewall.@redirect[1].src='wan'
firewall.@redirect[1].name='pop3'
firewall.@redirect[1].src_dport='110'
firewall.@redirect[1].target='DNAT'
firewall.@redirect[1].dest_ip='192.168.1.200'
firewall.@redirect[1].dest='lan'
firewall.@redirect[1].proto='tcp'
firewall.@redirect[2]=redirect
firewall.@redirect[2].src='wan'
firewall.@redirect[2].name='submission'
firewall.@redirect[2].src_dport='587'
firewall.@redirect[2].target='DNAT'
firewall.@redirect[2].dest_ip='192.168.1.200'
firewall.@redirect[2].dest='lan'
firewall.@redirect[2].proto='tcp'
firewall.@redirect[3]=redirect
firewall.@redirect[3].src='wan'
firewall.@redirect[3].name='IMAP'
firewall.@redirect[3].src_dport='143'
firewall.@redirect[3].target='DNAT'
firewall.@redirect[3].dest_ip='192.168.1.200'
firewall.@redirect[3].dest='lan'
firewall.@redirect[3].proto='tcp'
firewall.@redirect[4]=redirect
firewall.@redirect[4].src='wan'
firewall.@redirect[4].name='IMAPS'
firewall.@redirect[4].target='DNAT'
firewall.@redirect[4].dest_ip='192.168.1.200'
firewall.@redirect[4].dest='lan'
firewall.@redirect[4].proto='tcp'
firewall.@redirect[4].src_dport='993'
firewall.@redirect[5]=redirect
firewall.@redirect[5].src='wan'
firewall.@redirect[5].name='SSH'
firewall.@redirect[5].src_dport='22'
firewall.@redirect[5].target='DNAT'
firewall.@redirect[5].dest_ip='192.168.1.200'
firewall.@redirect[5].dest='lan'
firewall.@redirect[5].proto='tcp'
firewall.@redirect[6]=redirect
firewall.@redirect[6].src='wan'
firewall.@redirect[6].name='HTTP'
firewall.@redirect[6].src_dport='80'
firewall.@redirect[6].target='DNAT'
firewall.@redirect[6].dest_ip='192.168.1.200'
firewall.@redirect[6].dest='lan'
firewall.@redirect[6].proto='tcp'
firewall.@redirect[7]=redirect
firewall.@redirect[7].src='wan'
firewall.@redirect[7].name='HTTPS'
firewall.@redirect[7].src_dport='443'
firewall.@redirect[7].target='DNAT'
firewall.@redirect[7].dest_ip='192.168.1.200'
firewall.@redirect[7].dest='lan'
firewall.@redirect[7].proto='tcp'
firewall.@zone[2]=zone
firewall.@zone[2].name='guest'
firewall.@zone[2].network='guest'
firewall.@zone[2].input='REJECT'
firewall.@zone[2].forward='REJECT'
firewall.@zone[2].output='ACCEPT'
firewall.@forwarding[1]=forwarding
firewall.@forwarding[1].src='guest'
firewall.@forwarding[1].dest='wan'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow DNS Queries'
firewall.@rule[3].src='guest'
firewall.@rule[3].dest_port='53'
firewall.@rule[3].proto='tcp udp'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[3].family='ipv4'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow DHCP request'
firewall.@rule[4].src='guest'
firewall.@rule[4].src_port='67-68'
firewall.@rule[4].dest_port='67-68'
firewall.@rule[4].proto='udp'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[4].family='ipv4'
firewall.ovpn=rule
firewall.ovpn.name='Allow-OpenVPN'
firewall.ovpn.src='wan'
firewall.ovpn.dest_port='1194'
firewall.ovpn.proto='udp'
firewall.ovpn.target='ACCEPT'
firewall.ovpn.family='ipv4'