OpenVPN stops internet when i enable it

Installing and Using OpenWrt
1

I have tried every guide which did i found in internet and nothing help me. I have created my own vpn via openvpn. These profiles work great when i'm starting them on windows/mac/iphone through app. But when i start it on router via openwrt it saying that it starteed but i have no internet when do it. I have created the interface, uploaded the profile and i was trying to fix it with firewall, but nothing helps

2

With VPN enabled, please run the following commands (copy-paste the whole block) and paste the output here, using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have

ubus call system board; \
uci export network; uci export dhcp; uci export firewall; \
ip -4 addr ; ip -4 ro li tab all ; ip -4 ru; \
ls -l  /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*
3

Do you control the OpenVPN server as well? If so, does the OpenVPN server push any routes to the clients?

4

yes i control it. how to check if it does route clients?

5

Check the server's .ovpn configuration file. Is there a push route directive in there?

See https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/ and https://openvpn.net/community-resources/how-to/

7

in .ovpn file there is no something with "push"

8

OpenWrt is fine. Check on the server side that you allow forwarding and that you masquerade the packets going out of the upstream interface.

9

but when i use absolutely same .ovpn profile on mac/ios/windows everything works fine. What should i do?

10

Yes, @degencia, most probably you just started the connection using the configuration file, it created the (unconfigured) interface and installed the routes, but OpenWrt doesn't know which zone it is assigned to.

You need to:

  1. Create OpenVPN interface with proto=none (the interface name is tun0 by default)
  2. Assign zone WAN for this interface

I'm pretty sure all of these are described in details on the wiki. Go check it out.

11
  1. I have setted up the wan zone in interface.
  2. tun0 is settled too
12

Let's have a look at the logs first. From both server and client.

13

Where i can find them?

14
15

i should start this on vpn server?
"logread -e openvpn; netstat -l -n -p | grep -e openvpn"

16

There is a line above this one.
And this concerns OpenWrt. If the server is running a different OS, you'd need to find the logfile.

18

Your lan and wan address spaces overlap.
You need to change the IP address of the lan interface.

1 Like
19

How to do this?

20 
uci set network.lan.ipaddr='192.168.2.1'
uci commit network
/etc/init.d/network restart
/etc/init.d/dnsmasq restart
/etc/init.d/openvpn restart
2 Likes
21

OH MY GOD IT HELPED!!!
Now everything is working great!
Thank you very much <3

1 Like
22

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.