search

gzenux / asuswrt-rtn18u

The UNOFFICIAL Asuswrt-Merlin ONLY for ASUS RT-N18U router.
https://gzenux.github.io/asuswrt-rtn18u
Other
62 stars 13 forks source link

No fileshare over VPN #32

Open djrooli opened 4 years ago

djrooli commented 4 years ago

Hello Guys!

First, Thanks your efforts on this. I installed and configured this firmware yesterday. Everyhing is working fine so far, except one thing. I also made an openvpn server.

I came to work today and I have set up openvpn client on this PC. I could connect easily, but I can't ping other clients and can't reach the USB disk shared over samba. I can ping the router over vpn, but that's all.

Is there something I missed? With the old stock firmware it was working fine.

Thank you for your help.

gzenux commented 4 years ago

Hi, The openvpn server feature implementation is different from asus stock firmware. This feature has been re-written by the merlin author.

I don't try the behavior of stock firmware but I can access the USB stick plugged on the router via VPN connection in my development version. I think you might stop the VPN server first and try to clarify your disk shared configuration.

Regarding to the ping issue, I think it might be related the router firewall configuration for opvenvpn server. You might try to login to the router via ssh and try to issue 'iptables -L OVPN' command to check the OVPN firewall settings.

In merlin's implementation I find the vpn clients are isolated by setting VPN client access rights to 'LAN only'(in VPN server configuration page). You could try to change this setting to 'Both' and the VPN clients should ping each other successfully.

djrooli commented 4 years ago

Hello !

First, thank you for your answer and time! I figured out, I can access the clients with the internal IPs. Here, on the server side I have ...1.x. IPs and at work I have ...0.x., so there after connecting to my 10.0.0.1 server I can ping and reach 1.x LAN addressed storages. I am using a raspberry pi to share a printer among all the clients so I don't want to mess up the settings right now, I will try to enable the 'Both' in the VPN client settings later. I think that will work. BTW it works great with 'LAN Only' setting, it just need a different LAN IP addressing, I mean ...1.x and ...0.x. . Thank you very much again for your help!