Question

Hello.

OpenVPN client does not work as claimed:

this is my configuration:

https://drive.google.com/file/d/1liRee--uvlz2c8J9UErzD0XtdaZFFRQi/view?usp=drivesdk

1) Luci interface does not see IP despite that connection is established:

https://drive.google.com/file/d/1kMPedltWlN3mGYZuI5tRoEzFKmWvJ0Bx/view?usp=drivesdk

https://drive.google.com/file/d/1FAIBYIicGZ5_L1csFVVAGS449VQANwUt/view?usp=drivesdk

I many times configured OpenWrt but I see such glitch for the first time!

DEVICE DETAILS

ROUTER UPTIME1 minute

PRODUCT CODERUT23000XXXX

SERIAL / MAC1102986413 / 00:1E:42:23:92:76

BATCH NUMBER / HW REVISION0035 / 0008

FW VERSIONRUT2XX_R_00.01.10

MODELRUT230

Answer 1

It's because you are using Tap mode and the Tap is automatically bridged to your Lan subnet and sharing that. You should be able to ping your Lan from the server to confirm It is connected, check the network in vi etc/config/network and you will see the tap0 in the Lan. My RUT240 shows the same but connection is fine and works.

Comments

Thank you mxracer303!

It's a windows server:

dev tap

proto tcp-server

port 1194

tls-server

server 10.5.0.0 255.255.0.0

comp-lzo

ca "C:\\Program Files\\OpenVPN\\config\\ca.crt"

cert "C:\\Program Files\\OpenVPN\\config\\server.crt"

key "C:\\Program Files\\OpenVPN\\config\\server.key"

dh "C:\\Program Files\\OpenVPN\\config\\dh2048.pem"

#push "redirect-gateway def1"

#push "dhcp-option DNS 8.8.8.8"  

push   "route-gateway dhcp"

tun-mtu 1500

tun-mtu-extra 32

mssfix 1450

keepalive 10 120

status "C:\\Program Files\\OpenVPN\\log\\openvupn-status.log"

log "C:\\Program Files\\OpenVPN\\log\\openvpn.log"

verb 3

client-config-dir "C:\\Program Files\\OpenVPN\\ccd"

ifconfig-pool-persist "C:\\Program Files\\OpenVPN\\ccd\\ipp.txt"  

client-to-client

comp-lzo yes

---

Go into device manager and then Action then Add legacy hardware network adapters, select Microsoft and then km-test loop back and install it, once installed go into properties and ipv4 and set IP address to something in your subnet along with subnet mask. You may need a DHCP server on same subnet to hand out the IPs for VPN. I used SoftEther on my windows server as It was a lot easier to set up and has a built-in DHCP server and NAT which made it a lot easier. Also check out WireGuard VPN, far better than OpenVPN configuration wise and just works, I'm working on trying to find a way to run it on RUT240

---

Thanks Mxracer303. I told you that  current OpenVPN server works well with many other OpenWRT routers.

Can you show me your Firewall config?

---

I ran TCPdump at both ends.

And I observe packet activity when initializing Ping.

I. e I state that the problem in routing on RUT230

---

Is that all? Is the manufacturer interested in supporting its users?